I'm not familiar with #3 but for #2 you could add a check of the password age to the login process. The implement it universally but it in the etc login process.
In our environment, we have users that authenticate to our LDAP server in a few ways:
1) they log into the server directly using SSH via PuTTY;
2) they log in to our server using FileZilla or WS_FTP using SFTP;
3) they authenticate their account via the LDAP on a Windows server using pGina
In method 1, they are prompted to change their password if it is expired, or are given the warning about the password will expire in X days. How do I have the user get a similar warning/message when connecting via methods 2 and 3? We have a lot of users who get themselves flustered because they think they have the right password, but because they're never warned or given a message, they think its wrong, put in a few more passwords, and eventually lock their account out.
Any ideas?
Harry
Harry Devine
Common ARTS Software Development
AJM-245
(609)485-4218
Harry.Devine@faa.gov
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users