[Fedora-directory-users] Ubuntu not enforcing password policies

[Nalin Dahyabhai]

On Tue, Dec 02, 2008 at 11:22:44PM -0500, John A. Sullivan III wrote:
> Seem to have it now.  The Ubuntu host did not like the settings copied
> in from Fedora.  However, simply reversing the default Ubuntu settings
> so that they are now:
> 
> account required   pam_unix.so
> account sufficient pam_ldap.so

Please be careful about this.  If this is the entire set of "account"
modules, then I think the end-result when pam_ldap.so fails might be
undefined (in particular, the user may be allowed access anyway, even if
pam_ldap.so indicates that the user should not have access, because no
"required" modules have indicated problems).

Cheers,

Nalin