VMware Communities: Message List - ESX v3.5 and LDAP ??

Re: ESX v3.5 and LDAP ??

Texiwill — Tue, 30 Jun 2009 12:47:59 GMT

Hello,

Moved to the Security forum.

You need to use different controls within your LDAP server. However you can use pam_tally.so and pam_cracklib.so to improve your local security for passwords..

One option is:

esxcfg-auth --usecrack=3 14 2 2 2 2

First entry is '3' retries for a password attempt.

Best regards,
Edward L. Haletky VMware Communities User Moderator, VMware vExpert 2009, Virtualization Practice Analyst
Now Available: 'VMware vSphere(TM) and Virtual Infrastructure Security: Securing the Virtual Environment'
Also available 'VMWare ESX Server in the Enterprise'
SearchVMware Pro|Blue Gears|Top Virtualization Security Links|Virtualization Security Round Table Podcast

Re: ESX v3.5 and LDAP ??

AndreTheGiant — Thu, 18 Jun 2009 18:37:37 GMT

I do not have if this control exist in the pam_ldap version with ESX 3.5.

But you can apply this control on your LDAP server.
During password change, the backend will reject the password.

Andre

ESX v3.5 and LDAP ??

btrcmptr — Thu, 18 Jun 2009 17:26:01 GMT

Howdy,

ESX v3.5 can use LDAP for authentication - so far so good. I have a requriement to maintain "password minimum difference = 3" Does ESX server have this setting?

Thank you in advance,

Bill Burke