The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
10 views

Cannot load compiled ltb-password-check module on Debian

I'm trying to compile and load LDAP Tool Box Project's password checker module to improve the capabilities of password policy overlay on the Debian 7.8. Here's what I've done so far: I've installed ...
0
votes
2answers
54 views

Cannot change password policy

I am logged in as the administrator in my Windows Server 2008 computer which is a domain controller. The password policies in local security policy are grey and I cannot change them. Do I have to ...
-1
votes
0answers
8 views

Auditing tool for Windows security policies [closed]

What tools do you use to audit Windows security policies. For example, I configured a Windows machine (A) with the policies (GPO security policies) that we want. (A) now is a baseline. How then could ...
1
vote
2answers
34 views

Apply a password group policy seperate from the Default Domain Policy?

Im trying to keep my Default Domain Policy clean and standard and I want to make a GPO for my password policies. I made it but it still gets the policies from the Default Domain Policy object. I ...
0
votes
1answer
45 views

Cannot enforce password change in OpenLDAP with Password Policy Overlay

I've implemented Password Policy Overlay on OpenLDAP on Debian Stable. The server side and the policies are working as expected. However, after expiration I cannot force users to change their ...
0
votes
0answers
39 views

Forcing a password change on OpenBSD

On OpenBSD 5.6 I need to provision a number of user accounts with default passwords. I would like users, upon their first SSH login, to be forced to change their passwords from the default. On CentOS ...
3
votes
2answers
69 views

Workstations hang on “Change Password” after expired Password

For one of our customers we have configered a maximum password age of 90 days. If those 90 days are over, the users are forced on logon to change their password. This worked fine for the past 9 ...
0
votes
0answers
30 views

Password policy GPO not working as intended [duplicate]

I have the following policy set up for my Server 2012 domain, and has been applied to my computer: The GPO is applied to all computers in the OU, and no other conflicting policies are defined. ...
1
vote
1answer
69 views

Get password policy information from LDAP Server

Is there a way to get the password policy information (password length, complexity etc) of a user from an OpenLDAP server? (with ldapsearch or some other way).
2
votes
1answer
873 views

Find current password complexity requirements on domain

I simply need to know what my network's password complexity requirements are at this time. I believe we had competing group policies in place (trying to clean up that mess) and I want to see which ...
0
votes
1answer
185 views

Disable Admin password requirement on Domain user PC

So here is my situation: My company runs a "Windows 2003 Server Standard Edition" domain server, connected to a bunch of Dell Optiplex PC's (380's, and 9020's). The older Dells (380) are connected to ...
0
votes
0answers
196 views

Users cannot change their passwords in Active Directory

We have created a new domain. The DCs are server 2012 and 2012r2 and the functional level of both forest and domain is 2008. Password policy is only set on the default domain policy and is set to ...
0
votes
0answers
147 views

enforce password length on ubuntu with pam_cracklib

I was trying to enforce password length to a minimum of 10 using pam_cracklib. here is my /etc/pam.d/common-password password requisite pam_cracklib.so retry=3 minlen=10 ...
1
vote
1answer
120 views

ldap ppolicy implementation for brute force prevention

I have an openldap server (with user passwords) open worldwide which I'm trying to secure. Step 1 was to limit access to data to authenticated users via ACLs. Step 2, to prevent brute force attacks, ...
7
votes
1answer
657 views

Does the password truly expire?

One can enable password expiration (aka password maximum age) on a Windows domain. I'm a little puzzled though about the meaning of that so-called expiration: It looks like the password does not ...
0
votes
1answer
38 views

Login authentication vanished from MongoDB install

A few months ago I enabled password protection on my MongoDB install. Today I ran the Mongo client and forgot to use my login details. Instead of rejecting nearly everything I try to do from the ...
0
votes
2answers
97 views

Required strength for Admin/Windows passwords [closed]

We're trying to come up with a policy for required password-strength for Windows passwords on our domain. I was leaning towards a 10 character minimum with special characters and uppercase. We have a ...
0
votes
1answer
103 views

Change hashing password algorith in Jasig CAS

I configurated my Jasig CAS to authenticate user from LDAP. Now, I would to change my hashing password algorith. Where, in CAS configuration, have I to configure it? I use Jasig CAS 3.5.2 and ...
2
votes
3answers
3k views

User unable to change password - Active Directory Group Policy

I've seen this issue come up, but no answers seem to be applicable. When a user tries to change their password using control-alt-delete -> change password, they're getting a "Unable to update the ...
0
votes
1answer
51 views

AD password not synchronising properly

I have 600+ users in AD, but only one causes me trouble. The problem is I can reset his password from AD, he can then log in to his machine. After that he would like to change his password from ...
1
vote
1answer
171 views

OpenLDAP pwdPolicySubentry for organizationalUnit

Can you set a pwdPolicySubentry for an organizationalUnit, so that all entries contained in that organizationalUnit follow that password policy?
0
votes
1answer
395 views

ppolicy with pam_ldap - pwdReset has no effect when logging in from Ubuntu

We installed ppolicy overlay on our ldap server. Password policies work correctly for locking out user after X incorrect password attempts, but we can't enforce user to change his password. When we ...
7
votes
1answer
466 views

How do I implement a Fine-grained password policy and expect XP machines to play nice?

I have a 2008 R2 functional level domain and am in the middle of implementing the first actual password policy my organization is going to use. To slowly roll this out to our users, we have chosen to ...
2
votes
2answers
295 views

How can I randomize or stagger password expiration through Active Directory?

We are about to implement a new password policy that will require users to change their password every six months. We also need every user to change their password this week. I'd rather not create a ...
1
vote
1answer
488 views

Changing Password expiry date for limited users in Domain

I have 50 users in my domain. But i have to set password expiry days for 90 for only 10 users. How can i do it. How can this be done without affecting any other users Password Policy.
2
votes
2answers
150 views

How long does a putty keyphrase need to be (i.e. how does putty encrypt private keys)

I'd like to know what a good minimum password length for a putty passphrase is. This depends on the amount of entropy the passphrase needs to have, which in turn depends on the length one attempt ...
4
votes
1answer
3k views

How to change Windows Server 2012 password requirements when installing?

i'm trying to install Windows Server 2012, and i'm being prompted that the Administrator account password does not meet the password security requirements: The password you typed does not meet the ...
0
votes
1answer
2k views

OpenLDAP: pwdChangedTime attribute isn't created after changing the password?

I'm going to integrate the check_mk's Multisite with OpenLDAP. After configuring the LDAP connector, I get the following error when opening the "Users & Contacts" page: Error executing sync hook ...
3
votes
1answer
249 views

Issue with Mac RDP clients connecting to Server 2008 if change password at next logon checked

I have a weird issue I haven't been able to figure out (primarily because I don't have a Mac to play with). When a user is connecting into our Windows Server 2008 and 2008 R2 servers with local user ...
2
votes
1answer
595 views

Setting fine-grained password policy on an OU - Windows Server 2008

I found this article: AD DS Fine-Grained Password and Account Lockout Policy Step-by-Step Guide really useful to set fine-grained password policies for a user or a Security Group. But I haven't found ...
0
votes
2answers
850 views

WMI query to check setting “Reversible Encryption” in Windows XP

In Windows XP, there are two settings in Group Policy I'm looking at: Password must meet complexity requirements Store password using reversible encryption Both of these settings are under Local ...
3
votes
2answers
397 views

Changing Windows password policy [closed]

We currently have the almost defacto standard of requiring complex passwords on our Windows AD domain. But this XKCD cartoon caught my eye a few months ago when it came up on Coding Horror (I think): ...
2
votes
1answer
962 views

Changing domain password on DC fails regardless of complexity

I have a new Windows 2008 R2 Server (Standard, German). After installation from CD I enabled RDP Access, installed the Active Directory services and executed dcpromo. After reboot I log in via RDP as ...
2
votes
2answers
240 views

Is it possible to limit the number of user account password resets per day in Active Directory?

Windows domain environment here. We're looking at putting in a self-service password reset system (using Citrix Single Sign-on), and I'm trying to figure out if we can limit the number of password ...
0
votes
1answer
789 views

openldap: how to implement password policies?

I would like to implement password policies for all openldap users. there are 2 things i would like to do: password aging (users should be forced to change their passwords at least every 90 days) ...
3
votes
1answer
325 views

Samba, password change and windows error messages

I moved password quality checking in Samba from check password script to PAM, now when pam_passwdqc or pam_cracklib deny password change the user revives a "Access denied" error, not the standard "The ...