Ok, how can I add a new operational attribute to schema? I've tried several ways, but
they didn't work.
When I created a new class based on 'inetorgperson' (e.g.,
'inetorgpersonex') I couldn't create object of this class or change class of
existing object (user account) by means of Fedora admin console.
I've tried to configure password policy too. But with enabled option 'user must
change password after reset' and when administrator change user's password user
succefully logins with new password and there are no exceptions or warnings that he must
change it. My program is using Novell JLDAP library, just in case.
Thank you in advance!
-----Original Message-----
From: Rich Megginson <rmeggins(a)redhat.com>
To: Leonid Bogdanov <leonid_bogdanov(a)mail.ru>,
"General discussion list for the 389 Directory server project."
<fedora-directory-users(a)redhat.com>
Date: Thu, 16 Jul 2009 09:15:13 -0600
Subject: Re: [389-users] Adding custom attribute to class
Leonid Bogdanov wrote:
> Hello!
>
> How can I add custom attribute to 'inetorgperson' class? Preferably without
inheritance.
You should never add custom attributes to standard objectclasses such as
inetOrgPerson. You should always extend the schema through inheritance
(or create a new operational attribute if you must).
> The problem is that I want to have boolean attribute which I can check in my program
and tell user that he must change password after admin reset. Something like
'pwdReset' attribute in OpenLDAP.
>
If you configure the password policy so that the user must change the
password after a reset
http://www.redhat.com/docs/manuals/dir-server/8.1/admin/User_Account_Mana...
Will that do what you want? You can also check the operational
attribute passwordExpirationTime
> Thank you!
>
> --
> 389 users mailing list
> 389-users(a)redhat.com
>
https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
ATTACHMENT: application/x-pkcs7-signature (smime.p7s)