https://bugs.openldap.org/show_bug.cgi?id=9156
--- Comment #4 from Ryan Tandy <ryan(a)openldap.org> ---
(In reply to David Coutadeur from comment #3)
> For information, I had to fix a typo before it compiles: the manpage of
> pbkdf2 overlay was not correctly written:
> in contrib/slapd-modules/passwd/pbkdf2/Makefile:
> ```
> MANPAGES = slapd-pw-pbkdf2.5
> ```
> should be:
> ```
> MANPAGES = slapo-pw-pbkdf2.5
That's https://bugs.openldap.org/show_bug.cgi?id=8837
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=9156
--- Comment #3 from David Coutadeur <david.coutadeur(a)gmail.com> ---
Hello,
I have made some new tests on OpenLDAP master branch.
For information, I had to fix a typo before it compiles: the manpage of pbkdf2
overlay was not correctly written:
in contrib/slapd-modules/passwd/pbkdf2/Makefile:
```
MANPAGES = slapd-pw-pbkdf2.5
```
should be:
```
MANPAGES = slapo-pw-pbkdf2.5
```
Here are the things I have basically tested:
- pwdMaxLength: OK
- pwdLastSuccess, pwdMaxIdle: KO: the user is able to authenticate after the
pwdMaxIdle delay. Also, the pwdLastSuccess is never written (see
https://tools.ietf.org/html/draft-behera-ldap-password-policy-10#section-5.…).
For information, I have enabled lastbind. The slapo-ppolicy man page does not
mention pwdLastSuccess by the way.
- pwdStartTime, pwdEndTime: OK, but there is no special ppolicy code returned,
and if I read correctly the draft
(https://tools.ietf.org/html/draft-behera-ldap-password-policy-10#section-7.1),
an "accountLocked" extended error code should be triggered.
- basic integration with ppm, and in particular the pwdCheckModuleArg
(https://github.com/ltb-project/ppm): OK (but will need some adaptation of the
check_password signature: https://github.com/ltb-project/ppm/issues/20)
Regards,
David
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=9058
Ryan Tandy <ryan(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |VERIFIED
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=9058
Ryan Tandy <ryan(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|UNCONFIRMED |RESOLVED
Resolution|--- |FIXED
--- Comment #1 from Ryan Tandy <ryan(a)openldap.org> ---
Already fixed in 2.5 by cd914149a665167b2c5ae16baa0c438824588819
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=9156
--- Comment #2 from David Coutadeur <david.coutadeur(a)gmail.com> ---
Hello,
Just for tracability, I have made some tests about this feature some time ago,
when it was available only at
https://github.com/mistotebe/openldap/tree/ppolicy10
I have basically tested these at 2020-01-20:
- pwdMaxLength
- pwdLastSuccess, pwdMaxIdle
- pwdStartTime, pwdEndTime
- basic integration with ppm (https://github.com/ltb-project/ppm)
I am planning do test again on RE25 branch of OpenLDAP soon.
David
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=8676
--- Comment #12 from Quanah Gibson-Mount <quanah(a)openldap.org> ---
Commits:
• 57b7003a
by Sergei Trofimovich at 2020-03-26T22:06:41+00:00
thr_posix.c: fix implicit function declaration for 'pthread_setconcurrency'
thr_posix.c: In function 'ldap_pvt_thread_set_concurrency':
thr_posix.c:96:9: error: implicit declaration of function
'pthread_setconcurrency'
return pthread_setconcurrency( n );
^~~~~~~~~~~~~~~~~~~~~~
pthread_setcanceltype
Signed-off-by: Sergei Trofimovich <slyfox(a)gentoo.org>
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=8676
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Keywords|has_patch, IPR_OK, |
|OL_2_5_REQ, |
|openldap-scratch |
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=8676
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |TEST
Status|IN_PROGRESS |RESOLVED
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=8837
--- Comment #5 from Ryan Tandy <ryan(a)openldap.org> ---
(In reply to Howard Chu from comment #4)
> The totp module is actually an overlay. There is nothing to rename there.
OK. Sorry, that was an assumption based on it being under passwd/. Thanks for
the correction.
--
You are receiving this mail because:
You are on the CC list for the bug.