LDAP Passwords

The Oracle Solaris LDAP naming service stores password information and shadow information in the ou=people container of the LDAP directory tree. On the Oracle Solaris LDAP naming service client, you can use the passwd -r ldap command to change a user's password. The LDAP naming service stores the password in the LDAP repository.

Password policy is enforced on the Oracle Directory Server Enterprise Edition. Specifically, the client's pam_ldap module follows the password policy controls that are enforced on Oracle Directory Server Enterprise Edition. For more information, see LDAP Naming Service Security Model in Working With Oracle Solaris 11.4 Directory and Naming Services: LDAP.