Installing Change LDAP Password Plugin ====================================== 1) Start with untaring the file into the plugins directory. Here is a example for the 2.0 version of the change_ldappass plugin. $ cd plugins $ tar -zxvf change_ldappass-2.2-1.4.0.tar.gz 2) Change into the change_ldappass directory, copy config.php.sample to config.php. Edit the config.php, making adjustments as you deem necessary. $ cd change_ldappass $ cp config_sample.php config.php $ vi config.php 3) Then go to your config directory and run conf.pl. Choose option 8 and move the plugin from the "Available Plugins" category to the "Installed Plugins" category. Save and exit. $ cd ../../config/ $ ./conf.pl ================= PHP Crack support ================= From 2.2 version plugin allows to check new passwords with PHP Crack extension. In PHP 4.x extension is enabled, when PHP compilation is configured with --enable-crack option. In PHP 5+ it is installed with 'pecl install crack' command. You can also download extension from http://pecl.php.net and compile it manually. Windows users should enable php_crack.dll extension in php.ini. In order to check passwords with PHP crack extension, admin must set $lcp_crack_dict setting in plugin configuration. Setting must contain path to compiled cracklib dictionary without file extension. Compiled crack dictionary is stored in three files with .hwm, .pwd and .pwi extensions. For example, setting can be set to '/var/cache/cracklib/cracklib_dict' on Debian or '/usr/share/cracklib/pw_dict' on Fedora. WARNING - Debian and Fedora don't bundle crack extension with their stock PHP packages. Plugin does not include dictionary compilation utilities and wordlists that can be used for compilation of cracklib dictionary. You can find more information about PHP Crack extension at http://www.php.net/ref.crack.