we are faced with strange issue (started in last 4-5months; tried to fix it ourselves -
our password policy require password change every 90 days... As soon as it reaches period
(passwordExpirationTime) no one can log-in
until DM changes password (and thus resets passwordExpirationTime attribute).
So, how we can fix that (tried to search forums and Net, but no luck)?
$ uname -rosv
Linux 2.6.18-400.el5.028stab117.2 #1 SMP Wed Dec 17 17:19:54 MSK 2014 GNU/Linux
$ cat /etc/redhat-release
CentOS release 5.11 (Final)
$ rpm -qa | grep 389 | sort
[All 389 packages are installed from EPEL repository; SSLv3 disabled; only secure port is
Our (in house) solution for password expiry notification is to get user's details from
LDAP export (LDIF) file:
script greps for some attribute values from 'ou=People' and from
'cn=nsPwPolicyEntry' section for user and then check
passwordExpirationTime and passwordWarning attribute values and decide if e-mail to user
has to be send in advance...
As soon as passwordExpirationTime value is reached, e.g. 20150201103158Z user is not able
to authenticate against LDAP.
Case I have missed some existing solution, can someone point to it, or to any other
Predrag Zečević, Technical Support Analyst, 2e Systems GmbH
Telephone: +49 6196 9505 815, Facsimile: +49 6196 9505 894
Mobile: +49 174 3109 288, Skype: predrag.zecevic
Headquarter: 2e Systems GmbH, Königsteiner Str. 87,
65812 Bad Soden am Taunus, Germany
Company registration: Amtsgericht Königstein (Germany), HRB 7303
Managing director: Phil Douglas
- Making your business fly!
"Rembrandt's first name was Beauregard, which is why he never used it." --