On Tue, 2012-06-05 at 12:17 +0200, Angel Bosch wrote:
I'm not sure if this is sss related, but I can't get passwd policies working.
Is there anyone using shadow attributes for passwd policies?
You should be able to configure this using:
ldap_pwd_policy = shadow
Additionally, if any of your shadow attributes are renamed, you can use:
to set them.
Be aware, however, that SSSD will *always* honor server-side password
policies if they are available. This is primarily done because shadow
attributes are rarely (if ever) properly maintained by the server, and
thus the LDAP password policy control is more reliable. So if they
disagree, the password policy control will always "win".