[Fedora-directory-users] posixaccount and shadowlastchange

[Steve Rigler]

On Tue, 2007-09-25 at 09:55 -0400, Victor Hugo dos Santos wrote:
> Hello,
> 
> Linux authentication based in FDS work fine, i log in the system for
> ssh and all users is in the FDS directory. cool !!!
> 
> but, i need use police security account for users (for example, in 60
> days this users need change the password or can't use the same
> password 3 times consecutive).
> 
> but the FDS dont work with shadow parameters, i run "getent passwd"
> and look all users (local and in FDS) but I run "getent shadow" and
> only show the local account, none account in the FDS.
> 
> how is possible manage the security police from posixaccount and more
> important, that for users continue being one transparent process.
> 
> URL ?? manual ?? docs ?? others ??
> 
> thanks
> 
> -- 

Your accounts need to have the "shadowAccount" objectclass and
"shadowLastChange" needs to be writable by ldap://self or by the dn that
changes their password on their behalf (if you use "rootbinddn" in your
pam ldap.conf).

-Steve