Thanks for the help. I turned that off and reset the password of a test user, and it set
passwordexpirationtime to 90 days from now. Looks good.
Thanks!
Harry
-----Original Message-----
From: 389-users-bounces(a)lists.fedoraproject.org
[mailto:389-users-bounces@lists.fedoraproject.org] On Behalf Of German Parente
Sent: Tuesday, April 07, 2015 9:24 AM
To: General discussion list for the 389 Directory server project.
Subject: Re: [389-users] Issue changing user password
Hi Harry,
seems that you are using the setting "User must change password after reset"
(passwordMustChange: on).
So, if a user password is reset by admin user, the password expiration time will be set to
epoch 0: 19700101000000Z
and it will be set to the right expiration time once the user has modified the password
itself.
If you set passwordMustChange to off, the password expiration time will be set to current
time + 90 days in any case.
thanks and regards,
German.
----- Original Message -----
From: "harry devine" <harry.devine(a)faa.gov>
To: 389-users(a)lists.fedoraproject.org
Sent: Tuesday, April 7, 2015 2:11:44 PM
Subject: [389-users] Issue changing user password
I have a PHP script that uses the PHP LDAP functions to change a
user’s password. I’ve noticed that when the password gets changed, the
passwordexpirationtime attribute gets reset to 19700101000000Z. Our
policy is to change passwords 90 days. Is there some setting in 389-ds
that I need to set to have this happen automatically? Or do I have to
set the passwordexpirationtime attribute myself when changing the password?
Thanks,
Harry
Harry Devine
DOT/FAA/AJM-2413
Common ARTS Software Development
harry.devine(a)faa.gov
(609)485-4218
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users