enterprise-support team mailing list archive

[Jonas Jelten <2121816@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

[ Impact ]

ppm is an OpenLDAP module for checking password quality when they are modified.
Passwords are checked against the presence or absence of certain character classes.

The ppm module exists in the openldap since version 2.5
(openldap-2.5.19+dfsg/contrib/slapd-modules/ppm/).

The default openldap overlay does not support many password quality
check, for example it does not support checking whether a password
contains multiple character types.

While the module source code exists, it was not enabled in build by
default. ppm however is enabled in openldap 2.6 in plucky.

By backporting the ppm module, existing installation remain unchanged
since this is just a new module which is not enabled by default.


[ Test Plan ]

 * TODO

[ Where problems could occur ]

 * Due to the new module, existing installations could be affected due to the new ppm.so files and documentation, and the installation could run out of disk space.
 * Using this module by choice in an existing installation could introduce a new password policy the users are unhappy with, hence resulting in a decrease in productivity.


[ Other Info ]

 * This feature was requested to be useful for Ubuntu 22.04

** Affects: openldap (Ubuntu)
     Importance: Undecided
         Status: Fix Released

** Affects: openldap (Ubuntu Jammy)
     Importance: Undecided
         Status: New

** Affects: openldap (Ubuntu Noble)
     Importance: Undecided
         Status: New

** Also affects: openldap (Ubuntu Noble)
   Importance: Undecided
       Status: New

** Also affects: openldap (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Changed in: openldap (Ubuntu)
       Status: New => Fix Released

** Summary changed:

- backport ppm module in slapd-contrib
+ enable ppm module in slapd-contrib

** Merge proposal linked:
   https://code.launchpad.net/~jj/ubuntu/+source/openldap/+git/openldap/+merge/491717

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to openldap in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/2121816

Title:
  enable ppm module in slapd-contrib

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/2121816/+subscriptions