Re: [389-users] Differences between Ubuntu vs CentOS Client regarding password policies

Hi all, I tried to search through the list but did not find what I was looking for. I am testing 389-ds installation and password policies implementation. I installed it both on Ubuntu 12.04 Server and on CentOS 6.3. Still in the beginning as I am stuck finding why the Ubuntu client does not honor server's password policies. The install is pretty basic, I ran setup-ds-admin.pl <http://setup-ds-admin.pl>;, followed by the default options and got a LDAP server running. Then from the console (not too comfortable with the commands in this case), enabled Fine-Grained password policy for the whole tree and ticked "User must change password after reset". All good for now. And here is the trick: On CentOS, I just ran authconfig-tui and enabled LDAP Client Authentication. Then "su - test_ldap" was successful and I got a message, stating "You are required to change your LDAP password immediately.". Happy! But, I cannot make Ubuntu client to do the same. The best I can do with it is to login to the server. It does not honor the password policies - no notifications for the users, login successful after password expired, etc. The Ubuntu client is 12.04 and I strictly followed their community wiki to set up PAM and be able to login. Btw, "getent passwd" and "id" works just fine, I can bind to the server, but no password policies. How I can fix this?

Any advice will be greatly appreciated! Thank you, George S.