openldap make sure password does not contain username

Posted by Ryan Horrisberger on Server Fault See other posts from Server Fault or by Ryan Horrisberger
Published on 2013-06-24T15:41:19Z Indexed on 2013/06/24 16:24 UTC
Read the original article Hit count: 279

Filed under:
|
|
|

Is there a way using openldap to ensure that a user's password does not contain their name or their username?

I know that you can use the ppolicy overlay pwdCheckModule by writing a C function to do password checking, but is this the best approach? It doesn't seem like many folks are doing password quality checking this way--the only example I've found is a github example which only does basic checking.

© Server Fault or respective owner

Related posts about linux

Related posts about ldap