https://bugs.openldap.org/show_bug.cgi?id=9156
--- Comment #2 from David Coutadeur <david.coutadeur(a)gmail.com> ---
Hello,
Just for tracability, I have made some tests about this feature some time ago,
when it was available only at
https://github.com/mistotebe/openldap/tree/ppolicy10
I have basically tested these at 2020-01-20:
- pwdMaxLength
- pwdLastSuccess, pwdMaxIdle
- pwdStartTime, pwdEndTime
- basic integration with ppm (https://github.com/ltb-project/ppm)
I am planning do test again on RE25 branch of OpenLDAP soon.
David
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=8676
--- Comment #12 from Quanah Gibson-Mount <quanah(a)openldap.org> ---
Commits:
• 57b7003a
by Sergei Trofimovich at 2020-03-26T22:06:41+00:00
thr_posix.c: fix implicit function declaration for 'pthread_setconcurrency'
thr_posix.c: In function 'ldap_pvt_thread_set_concurrency':
thr_posix.c:96:9: error: implicit declaration of function
'pthread_setconcurrency'
return pthread_setconcurrency( n );
^~~~~~~~~~~~~~~~~~~~~~
pthread_setcanceltype
Signed-off-by: Sergei Trofimovich <slyfox(a)gentoo.org>
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=8676
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Keywords|has_patch, IPR_OK, |
|OL_2_5_REQ, |
|openldap-scratch |
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=8676
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |TEST
Status|IN_PROGRESS |RESOLVED
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=8837
--- Comment #5 from Ryan Tandy <ryan(a)openldap.org> ---
(In reply to Howard Chu from comment #4)
> The totp module is actually an overlay. There is nothing to rename there.
OK. Sorry, that was an assumption based on it being under passwd/. Thanks for
the correction.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=8837
--- Comment #4 from Howard Chu <hyc(a)symas.com> ---
(In reply to Ryan Tandy from comment #2)
> (In reply to Quanah Gibson-Mount from comment #1)
> > Actually, since it is an overlay, the slapo prefix is correct (o=overlay)
> > and the slapd prefix is incorrect (used for backends).
>
> I don't think calling a password module an "overlay" is accurate.
>
> I agree with Peter, it should be called slapd-pw-pbkdf2.5 (and slapo-totp.5
> to slapd-pw-totp.5 while we're at it). Or introduce a new "slapp-"
> convention if it must be distinguished from backends, but that seems
> overkill...
The totp module is actually an overlay. There is nothing to rename there.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=6958
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |VERIFIED
Target Milestone|2.5.0 |---
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=6958
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |WORKSFORME
Status|UNCONFIRMED |RESOLVED
--- Comment #5 from Quanah Gibson-Mount <quanah(a)openldap.org> ---
Unable to reproduce on FreeBSD 12.1 patch level 3
include ./schema/core.schema
include ./schema/cosine.schema
include ./schema/corba.schema
include ./schema/java.schema
include ./schema/inetorgperson.schema
include ./schema/misc.schema
include ./schema/nis.schema
include ./schema/openldap.schema
include ./schema/duaconf.schema
include ./schema/dyngroup.schema
pidfile /home/build/git/openldap/tests/testrun/slapd.1.pid
argsfile /home/build/git/openldap/tests/testrun/slapd.1.args
TLSCACertificatePath /home/build/git/openldap/tests/testrun/tls/ca/certs/
TLSCACertificateFile
/home/build/git/openldap/tests/testrun/tls/ca/certs/testsuiteCA.crt
TLSCertificateKeyFile
/home/build/git/openldap/tests/testrun/tls/private/localhost.key
TLSCertificateFile
/home/build/git/openldap/tests/testrun/tls/certs/localhost.crt
TLSVerifyClient allow
TLSCRLCheck all
../servers/slapd/slapindex -f testrun/slapd.1.conf -v
[build@freebsd12 ~/git/openldap/tests]$ echo $?
0
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=8837
--- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> ---
(In reply to Ryan Tandy from comment #2)
> (In reply to Quanah Gibson-Mount from comment #1)
> > Actually, since it is an overlay, the slapo prefix is correct (o=overlay)
> > and the slapd prefix is incorrect (used for backends).
>
> I don't think calling a password module an "overlay" is accurate.
>
> I agree with Peter, it should be called slapd-pw-pbkdf2.5 (and slapo-totp.5
> to slapd-pw-totp.5 while we're at it). Or introduce a new "slapp-"
> convention if it must be distinguished from backends, but that seems
> overkill...
Pretty sure we actually discussed slapm- for module in the past, actually.
--
You are receiving this mail because:
You are on the CC list for the bug.