LDAP Trusted Mode Password Expiring

[Tony Constantine]

When using a LPAD account to login to a trusted mode server the password is always expired - hence having to recreated a new password evertime we log in

From what I have read you can have the coexistence of LDAP-UX and Trusted Mode accounts and that Trusted Mode policies are not enforced on LDAP accounts and LDAP polices not enforced on Trusted Mode Servers Accounts

[Steven E. Protter]

Shalom,

There were reports of troubles just like this several years ago with trusted systems. For a while LDAP was not supported on trusted systems at all.

What to do:

1) Make sure LDAP is properly patched.
2) Use sam to make the policies on passwords less stringent.
3) Make sure the /etc/nsswitch.conf configuration includes an ldap option.
4) Make sure that accounts that exist off the server are not duplicated on the server.
5) Go through your LDAP integration document and check all the steps, a mistake might have been made.

This should work.

SEP

[Sameer_Nirmal · Accepted solution]

Hi Tony,

Are you using Netscape Directory Server?
If yes, then you need to use "/etc/pam.ldap.trusted" file ( which is provided as sample file for LDAP-UX & Trusted Mode support) as /etc/pam.conf file. Saying that make a copy of existing "/etc/pam.conf" and copy "/etc//pam.ldap.trusted" file as "/etc/pam.conf".

Refer this link.
http://docs.hp.com/en/J4269-90040/apc.html

[Tony Constantine]

Thanks Guys

Sameer yes we are using netscape directory and using /etc/pam.ldap.trusted has worked