aboutsummaryrefslogtreecommitdiffstats
path: root/modules/pam
diff options
context:
space:
mode:
authorBuchan Milne <buchan@mageia.org>2010-11-22 14:20:10 +0000
committerBuchan Milne <buchan@mageia.org>2010-11-22 14:20:10 +0000
commit48d8394fb8bb2b903871cf104c1b440919d9d266 (patch)
tree6e92822a422a158301a0a835cbc83ce06d19195e /modules/pam
parent92d59dd7598a752dee8dbdd291738eec55865005 (diff)
downloadpuppet-48d8394fb8bb2b903871cf104c1b440919d9d266.tar
puppet-48d8394fb8bb2b903871cf104c1b440919d9d266.tar.gz
puppet-48d8394fb8bb2b903871cf104c1b440919d9d266.tar.bz2
puppet-48d8394fb8bb2b903871cf104c1b440919d9d266.tar.xz
puppet-48d8394fb8bb2b903871cf104c1b440919d9d266.zip
Add timelimits for nss_ldap, enable password policy
Diffstat (limited to 'modules/pam')
-rw-r--r--modules/pam/templates/ldap.conf4
1 files changed, 3 insertions, 1 deletions
diff --git a/modules/pam/templates/ldap.conf b/modules/pam/templates/ldap.conf
index 88e47d6b..f346873a 100644
--- a/modules/pam/templates/ldap.conf
+++ b/modules/pam/templates/ldap.conf
@@ -2,7 +2,9 @@ rootbinddn cn=<%= fqdn %>,ou=Hosts,<%= dc_suffix %>
uri ldaps://ldap.<%= domain %>
base <%= dc_suffix %>
-pam_lookup_policy no
+timelimit 4
+bind_timelimit 4
+pam_lookup_policy yes
pam_password exop
nss_base_passwd ou=People,<%= dc_suffix %>?one
nss_base_shadow ou=People,<%= dc_suffix %>?one