Self Service Password version 0.4¶

Presentation¶

Self Service Password is a PHP application that allows users to change their password In an LDAP directory.

More information and screenshots:
http://ltb-project.org/wiki/documentation/self-service-password

Download page:
http://ltb-project.org/wiki/download#self_service_password

Changelog¶

Summary¶

• Reset password by questions or by mail tokens
• Password policy:
  • Check special characters
  • Forbidden characters
  • Do not reuse same password
• Spanish and Brazilian translation
• Debian and RPM packaging

Details¶

• Bug #183: Corrected german translations
• Bug #189: Accentued characters in passwords are not well managed
• Bug #258: LTB advertises features even if not configured
• Bug #269: Bad link to token page
• Feature #146: Lost Password
• Feature #178: Reject some special characters from passwords
• Feature #181: Secret Question feature to reset/set your own password
• Feature #185: Provide packages for SSP
• Feature #186: Check special characters in password
• Feature #207: Use separate files for language strings
• Feature #233: Rewrite documentation
• Feature #256: Display password policy details only on failures for authenticated users
• Feature #259: Check that user doesn't reuse the same password
• Feature #266: Add pt-BR lang

Thanks¶

Thanks to contributors:

• Jonathan Clarke
• Leandro Lattanzio
• Remi Verchere
• Felix Bartels
• Vinicius Carvalho

Presentation¶

OpenLDAP 2.4.23 changelog can be seen here: http://www.openldap.org/software/release/changes.html

LTB provides RPMs for 32bits and 64 bits: http://tools.ltb-project.org/projects/ltb/files

Security considerations¶

OpenLDAP < 2.4.23 have some security issues, as pointed here by RedHat: https://rhn.redhat.com/errata/RHSA-2010-0543.html

Migration to OpenLDAP 2.4.23 is recommanded.

Credits¶

• Jonathan Clarke
• Thomas Chemineau

Changelog¶

• #150: typo in options parsing for ldap_response_time.pl
• #172: single master mode for check_ldap_syncrepl_status.pl
• #194: script to check LDPA query: check_ldap_query.pl
• #195: update documentation on wiki

Download ¶

• Nagios plugins: http://tools.ltb-project.org/attachments/download/152/ltb-project-nagios-plugins-0.3.tar.gz
• Cacti plugins: http://tools.ltb-project.org/attachments/download/151/ltb-project-cacti-plugins-0.3.tar.gz

Changelog¶

See OpenLDAP changelog here: http://www.openldap.org/software/release/changes.html

Packages now include OpenLDAP init script 1.0, that allow to compress backup LDIF.

Download¶

RPMs are available for 32 bits and 64 bits: http://tools.ltb-project.org/projects/list_files/ltb

OpenLDAP 2.4.21 RPMs¶

Presentation¶

Today, OpenLDAP announces that 2.4.21 is the new stable version: http://www.openldap.org/lists/openldap-announce/201002/msg00000.html

Today, LTB-project team has released the new RPMs! Source RPMs are also available.

Download¶

http://tools.ltb-project.org/projects/list_files/ltb

Self Service Password version 0.3 release¶

Presentation¶

Self Service Password is a small PHP application that allows users to change their password in an LDAP Directory. Is is compatible with Active Directory and Samba passwords.

Changelog¶

• German language
• Better error message management (criticity level)
• Support SHA/MD5/SMD5/CRYPT hashes
• Samba mode
• CSS improvement
• Local password policy with constraints displaying

Upgrade notes¶

• $ad_mode value is no more "on" or "off" but true or false

Documentation¶

http://ltb-project.org/wiki/documentation/self-service-password

Download¶

http://tools.ltb-project.org/attachments/download/81/ltb-project-self-service-password-0.3.tar.gz

Thanks¶

• Jonathan Clarke
• Brice Maron
• Felix Bartels
• Jérôme Huet
• Nicolas Girardin

RPMs can be downloaded on http://tools.lsc-project.org/projects/list_files/ltb

• Upgrade to OpenLDAP 2.4.19 (#135)
• Upgrade to init script 0.9
• Upgrade to check_password 1.1
• Disable strip to provide debuginfo package (#117)
• Use %config(noreplace)
• Start slapd before upgrade

• Account expiration mail warning: http://ltb-project.org/wiki/documentation/ldap-scripts/checkldappwdexpiration
• Clean broken aliases: http://ltb-project.org/wiki/documentation/ldap-scripts/cleanldapbrokenaliases
• File to LDIF converter (csv2ldif + ldif2ldif): http://ltb-project.org/wiki/documentation/ldap-scripts/file2ldif

A new version of the OpenLDAP init script is out.

• Configuration can be in cn=config or in a standard slapd.conf (rewrite of many functions)
• The status target displays detected suffix from cn=config or slapd.conf
• This script follows the LSB directives (#123)

More info here: http://ltb-project.org/wiki/documentation/openldap-initscript

You can now download Self Service Password v0.2.

• Possibility to hash password in SSHA (#127)
• Strip slashes depending on magic quote configuration (#126)
• Possibility to set user login in URL, via a GET parameter
• Correct a typo in the default LDAP filter
• Bad credentials error returned if user is not found
• The login field value is kept after errors

Thanks to Jonathan Clarke for his help.