openLDAP documentation assistance

[William Muriithi]

Hello all,

I am trying to set openLDAP enforce password policy and I am getting
in trouble figuring what these lines should go.  Basically, I have the
password schema in place, and the module outlay.

Now, it look I will have to get LDAP configuration somewhere and also
create a new organization unit that will go into the database.  The
later is easier to figure out where it should be placed, but I am
having a hard time figuring where the ppolicy configuration should be
placed.

I am using the new cn=config setup and assume it should be one of the following:

/etc/ldap/slapd.d/cn\=config.ldif
/etc/ldap/slapd.d/cn=config/olcDatabase={-1}frontend.ldif
/etc/ldap/slapd.d/cn=config/olcDatabase={0}config.ldif
/etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb.ldif

http://www.openldap.org/doc/admin24/guide.html

Look under section 12.10.2

Quote:

Instantiate the module in the database where it will be used, after
adding the new ppolicy schema and loading the ppolicy module. The
following example shows the ppolicy module being added to the database
that handles the naming context "dc=example,dc=com". In this example
we are also specifying the DN of a policy object to use if none other
is specified in a user's object.

       database bdb
       suffix "dc=example,dc=com"
       [...additional database configuration directives go here...]

       overlay ppolicy
       ppolicy_default "cn=default,ou=policies,dc=example,dc=com"

End of quote:

Where the heck should above go?  Have anybody here working with
password policy outlay before?

Regards,

William
--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists