On Wed, Nov 26, 2008 at 05:15:39PM +0530, piyush joshi wrote: Some of those things can be done using password policies: http://www.openldap.org/doc/admin24/overlays.html#Password%20Policies Note that such policies only affect authentication *to the LDAP server* so you will need to consider how your applications use LDAP: If they authenticate users by binding to LDAP as the user then the password policy will probably do what you want. On the other hand, if authentication is done by reference to attributes read from the user entry then the policy will not do anything. Andrew -- ----------------------------------------------------------------------- | From Andrew Findlay, Skills 1st Ltd | | Consultant in large-scale systems, networks, and directory services | | http://www.skills-1st.co.uk/ +44 1628 782565 | -----------------------------------------------------------------------