I've searched extensively and haven't found an answer to this. I have a RHEL6.4 system running slapd version 2.4.23-32.el6_4.1 with sssd version 1.9.2-82.11.el6_4. I've configured OpenLDAP to use ppolicy. Everything (password expires, account locked, grace periods, etc) is working beautifully if the user logs in with their password. But if they have an SSH public key, then even if the account in OpenLDAP is locked, the user can still login.
I can't seem to find a FAQ on configuring OpenLDAP and SSSD in regards to ppolicy settings for this case. I hope I am just missing something simple. Any suggestions or pointers would be much appreciated.
High Performance Computing & Scientific Visualization
Lockheed Martin, Supporting the EPA
Research Triangle Park, NC
HSCSS Task Order Lead - Ravi Nair
919-541-5467 - Nair.Ravi(a)epa.gov
High Performance Computing Subtask Lead - Durward Jones
919-541-5043 - Jones.Durward(a)epa.gov
Environmental Modeling and Visualization Lead - Heidi Paulsen
919-541-1834 - Paulsen.Heidi(a)epa.gov
Tested fix for #2051 and seem to work.
However it just occurred to me we may always want to check if pwd.pw_gid
is listed in the gids returned and add it if not ?
Simo Sorce * Red Hat, Inc * New York
I have my buildir in /dev/shm, therefore I don't run configure with flag
--with-test-dir=/dev/shm. I noticed that directory tests_utils was not removed
after successful test execution. This patch add removing this directory,
similar behaviour is in test_dyndns and test_nss_srv