3:45 a.m.
Dear Team,
Is there any Schema or Attribute which can be used to
disable user account if that account is not being used from one month or by
providing date in advance to
disable the account in future automatically.
--
Regards
Piyush Joshi
9415414376
8:32 a.m.
On Wednesday 26 November 2008 05:45:39 piyush joshi wrote:
Dear Team,
Is there any Schema or Attribute which can be used to
disable user account if that account is not being used from one month or by
providing date in advance to
disable the account in future automatically.
I assume you mean disabling a unix account, you can use password aging
(shadow) atributes from the nis schema, smbldap-tools manages that, and some
others to disable samba accounts.
--
Jorge Armando Medina
Computación Gráfica de México
Web: www.e-compugraf.com
Tel: 55 51 40 72
email: jmedina(a)e-compugraf.com
GPG Key: 1024D/28E40632 2007-07-26
GPG Fingerprint: 59E2 0C7C F128 B550 B3A6 D3AF C574 8422 28E4 0632
9:57 a.m.
On Wed, Nov 26, 2008 at 05:15:39PM +0530, piyush joshi wrote:
Is there any Schema or Attribute which can be used
to
disable user account if that account is not being used from one month or by
providing date in advance to
disable the account in future automatically.
Some of those things can be done using password policies:
http://www.openldap.org/doc/admin24/overlays.html#Password%20Policies
Note that such policies only affect authentication *to the LDAP server*
so you will need to consider how your applications use LDAP:
If they authenticate users by binding to LDAP as the user then the
password policy will probably do what you want. On the other hand,
if authentication is done by reference to attributes read from the
user entry then the policy will not do anything.
Andrew
--
-----------------------------------------------------------------------
| From Andrew Findlay, Skills 1st Ltd |
| Consultant in large-scale systems, networks, and directory services |
| http://www.skills-1st.co.uk/ +44 1628 782565 |
-----------------------------------------------------------------------
5237
days inactive
5237
days old
openldap-technical@openldap.org
2 comments
3 participants
participants (3)
-
Andrew Findlay -
Jorge Armando Medina -
piyush joshi