Skip to content
Snippets Groups Projects
Commit be8607e9 authored by Thomas Hackl's avatar Thomas Hackl
Browse files

Better format

parent 0c3745a5
No related branches found
No related tags found
No related merge requests found
...@@ -4,19 +4,19 @@ LDAP Users must change their password regularly according to the password policy ...@@ -4,19 +4,19 @@ LDAP Users must change their password regularly according to the password policy
When the old password isn't valid anymore but hasn't been changed yet, there's a grace period of six logins before the account is suspended. The plugin shows a reminder before password expiration and another reminder if only less than six logins remain before account suspension because of password expiration. When the old password isn't valid anymore but hasn't been changed yet, there's a grace period of six logins before the account is suspended. The plugin shows a reminder before password expiration and another reminder if only less than six logins remain before account suspension because of password expiration.
## Configuration ## Configuration
The Plugin provides six entries in Stud.IP global configuration, all in the section 'ldappasswordexpiryplugin': The Plugin provides six entries in Stud.IP global configuration, all in the section `ldappasswordexpiryplugin`:
- *LDAPPASSWORDEXPIRYPLUGIN_AUTHPLUGINS* * **LDAPPASSWORDEXPIRYPLUGIN_AUTHPLUGINS**
Comma-separated list of Stud.IP auth plugins that shall be monitored by this plugin. Comma-separated list of Stud.IP auth plugins that shall be monitored by this plugin.
- *LDAPPASSWORDEXPIRYPLUGIN_GRACELOGINATTRIBUTE* * **LDAPPASSWORDEXPIRYPLUGIN_GRACELOGINATTRIBUTE**
Name of the LDAP attribute that is used for storing how many grace logins remain until the account is suspended after password expiration. Leave empty if not applicable. Name of the LDAP attribute that is used for storing how many grace logins remain until the account is suspended after password expiration. Leave empty if not applicable.
Default is "loginGraceRemaining". Default is "loginGraceRemaining".
- *LDAPPASSWORDEXPIRYPLUGIN_LOGINLIMITATTRIBUTE* * **LDAPPASSWORDEXPIRYPLUGIN_LOGINLIMITATTRIBUTE**
Name of the LDAP attribute that stores the number of grace logins a user has after password expiration. Leave empty if not applicable. Name of the LDAP attribute that stores the number of grace logins a user has after password expiration. Leave empty if not applicable.
Default is "loginGraceLimit". Default is "loginGraceLimit".
- *LDAPPASSWORDEXPIRYPLUGIN_PASSWORDCHANGEURL* * **LDAPPASSWORDEXPIRYPLUGIN_PASSWORDCHANGEURL**
URL of a website where users can change their current password. Leave empty if not applicable. URL of a website where users can change their current password. Leave empty if not applicable.
- *LDAPPASSWORDEXPIRYPLUGIN_PASSWORDEXPIRYATTRIBUTE* * **LDAPPASSWORDEXPIRYPLUGIN_PASSWORDEXPIRYATTRIBUTE**
Name of the LDAP attribute that shows the password expiry date. Name of the LDAP attribute that shows the password expiry date.
- *LDAPPASSWORDEXPIRYPLUGIN_WARNINGDAYSBEFORE* * **LDAPPASSWORDEXPIRYPLUGIN_WARNINGDAYSBEFORE**
How many days before password expiration shall the warning message appear? How many days before password expiration shall the warning message appear?
Default is 7 (one week). Default is 7 (one week).
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment