I'm not familiar with #3 but for #2 you could add a check of the password age to the login process. The implement it universally but it in the etc login process.

On Aug 9, 2012 4:01 PM, <harry.devine@faa.gov> wrote:

In our environment, we have users that authenticate to our LDAP server in a few ways:

        1) they log into the server directly using SSH via PuTTY;
        2) they log in to our server using FileZilla or WS_FTP using SFTP;
        3) they authenticate their account via the LDAP on a Windows server using pGina

In method 1, they are prompted to change their password if it is expired, or are given the warning about the password will expire in X days.  How do I have the user get a similar warning/message when connecting via methods 2 and 3?  We have a lot of users who get themselves flustered because they think they have the right password, but because they're never warned or given a message, they think its wrong, put in a few more passwords, and eventually lock their account out.

Any ideas?
Harry

Harry Devine
Common ARTS Software Development
AJM-245
(609)485-4218
Harry.Devine@faa.gov

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users