Thanks for the help.
1- Yes users can change their passwords.
2 - In the log I don't have much, I didn't change the verbosity of the
But I did something else and I don't really understand it.
My first configuration of Password Policy was Global and by the way I have
a master slave installation.
Reading the Directory Server Documentation, I found that I can create a
specific Password Policy, so I took the ou=people,dc=example,dc=com and I
created a new Password Policy and this time the policy worked, users may
change their passwords.
But I had another "issue", i don't know if I can call it that way. The
documentation says that the Password Policy get bypassed when using the
Admin account or the Directory Manager to change user password, but I got
two behaviors :
- if I change the user password using the cmd line with ldappasswd, the
policy get enforced even when using Directory Manager to make the change.
- if I change the user password using 389DS Console, the policy get
bypassed when using Directory Manager to make the change.
So in conclusion I have :
- The global password policy is not working.
- The local policy is working, but with different behaviors.
For now I am using the local Password Policy because it's doing the job...
Le jeu. 22 nov. 2018 à 21:35, Olivier JUDITH <gnulux(a)gmail.com> a écrit :
Does your user has rights to write userPassword attribute ?
What do you have in the server log /var/log/dirsrv/dirsrv@<instance>/errors
389-users mailing list -- 389-users(a)lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines