Reputation: 1271
I'm pretty new to openLDAP and I am trying to set up a password policy. I have the following in my slapd.conf:
include /etc/openldap/schema/ppolicy.schema
moduleload ppolicy.la
objectClass: top
objectClass: device
objectClass: pwdPolicy
cn: default
pwdAttribute: userPassword
pwdMaxAge: 5184000
pwdExpireWarning: 432000
pwdInHistory: 6
pwdCheckQuality: 1
pwdMinLength: 8
pwdMaxFailure: 5
pwdLockout: TRUE
pwdLockoutDuration: 1920
pwdGraceAuthNLimit: 0
pwdFailureCountInterval: 0
pwdMustChange: TRUE
pwdAllowUserChange: TRUE
pwdSafeModify: FALSE
pwdCheckModule: check_password.so
pwdCheckQuality: 2
the problem though is that when I restart slapd I get the following error: /etc/openldap/slapd.conf: line 86: unknown directive inside backend database definition.
can anyone tell me what I have done wrong?
Upvotes: 0
Views: 2734
Reputation: 310980
The basic problem here is that you are inventing syntax. LDIF commands don't belong in slapd.conf.
Upvotes: 1