Ivan Ferreira wrote:
Hi everybody.
I’m testing the password policies and account lockout policies on
Directory Server 1.2.2.
For account lockout policies, it seems that it does not works with pam
authentication, for example for services like login or ssh.
If I set the account lockout on 3 failures, I can login to the system
after any number of failures. No relevant messages on logs.
The same for the password change after reset. It’s not required to
change the password.
¿Does anybody successfully configured password and account policies
for OS authentication?
In /etc/ldap.conf I have:
pam_lookup_policy yes
Thanks in advance.
That same setting works fine for me here.