On Tue, 2017-04-25 at 17:02 -0700, Lucas Sweany wrote:

Does anyone know the specific limitations on the allowed characters for passwords in 389-ds? I use the windows passsync agent on my domain controllers and occasionally come across this problem. I am thinking there might be a unicode problem, but I am having a hard time nailing it down, or finding documentation on it for that matter.

Example event from 389-ds:

[24/Apr/2017:07:39:15 +0000] conn=268899 op=2 MOD dn="uid=xxx,ou=yyy,dc=a,dc=b,dc=c", invalid password syntax

This will be defined by your password policy in cn=config, or by subtree password policies on the objects themself.

https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/ht...

https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/ht...

I hope this helps!

Thanks,

-Lucas _______________________________________________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org