0

I have a problem with Apache Directory server password policy. It mentioned in ApacheDS documentation that the password policy is active by default. I have configured the policy to keep history of (5 previous) passwords and when a user tries to change it (with any of the existing passwords), there should be a "invalid reuse of password present in password history" exception generated, however ApacheDS dos not generate the exception.

The password policy entry is as below:

dn: ads-pwdid=default,ou=passwordPolicies,ads-interceptorId=authenticationInterceptor,ou=interceptors,ads-directoryServiceId=default,ou=config
objectclass: ads-passwordPolicy
objectclass: ads-base
objectclass: top
ads-pwdattribute: userPassword
ads-pwdid: default
ads-enabled: TRUE
ads-pwdcheckquality: 1
ads-pwdexpirewarning: 600
ads-pwdfailurecountinterval: 30
ads-pwdgraceauthnlimit: 5
ads-pwdinhistory: 5
ads-pwdlockout: TRUE
ads-pwdlockoutduration: 0
ads-pwdmaxage: 3888000
ads-pwdmaxfailure: 5
ads-pwdminlength: 8
ads-pwdmustchange: TRUE
ads-pwdsafemodify: FALSE
ads-pwdvalidator:org.apache.directory.server.core.api.authn.ppolicy.DefaultPasswordValidator

If someone can throw any light on it, it shall be very helpful

2
  • I think this is not reproducible against trunk version M21. What version of ApacheDS do you use?
    – azbarcea
    Mar 1, 2016 at 2:32
  • I am on M20, the exception is not generated from Studio as well as from Apache DS LDAP API, is there any configuration that I am missing, I really don't know
    – Ironluca
    Mar 2, 2016 at 15:39

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.