Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to implement password policies for all openldap users.

there are 2 things i would like to do:

  1. password aging (users should be forced to change their passwords at least every 90 days)
  2. password complexity ( users must have a password minimal length of 8chars including at least 1 number, 1 alpha and 1 special )
share|improve this question
up vote 1 down vote accepted

See this: 12.10. Password Policies from the OpenLDAP manual.

The second part will probably require some coding but the overlay works and any client that listens to what OpenLDAP tells it will warn about expiring passwords.

I'd also recommend a password history, strictly speaking your requirements don't force a user to change from one password to another, but only from the old password to the new (which could be the same regarding your requirements)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.