On Mon, 2015-10-05 at 16:14 -0400, Rob Crittenden wrote:
Bedorf, Paul wrote:
> I am running a 389 Directory Server v1.2.9.9
>
> We have enabled a password policy as follows:
>
>
>
> However, I don’t want to wait until tomorrow for my ‘test’ user to
> expire, as im doing some API testing and need the ‘test’
>
> user to expire at any time. How would I force a user password expiry on
> an individual account?
>
A coarse way to do it is to manually advance the system clock. Or find
the attribute holding the expiration date and tweak it.
Set either nsAccountLock: true or change accountUnlockTime: to be in the future.
You can get the current DS system time for the root DSE, and just add to it.
--
William Brown <william(a)blackhats.net.au>