[389-users] Need help configuring fine grained password policy enforcement on RHEL6 using sssd

[Bright, Daniel]

All,

I am in the process of moving away from pam_ldap and on to pam_sss. The basic sssd setup is working just fine, user authentication works, getent passwd works, caching is great, everything looks like it's working fine except for password policy enforcement. I am wondering if there is some sort of password policy overlay I need to use, or a special setup of sssd.conf, I tried using "ldap_pwd_policy=shadow" however this doesn't allow me to change passwords.

If anyone could help it would be greatly appreciated, I will post a working config on my blog after this is done so we can help others too.

Thanks!
Daniel Bright
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20130911/f7538318/attachment.html>