François Beretti wrote:
I am trying to implement password expiration in my LDAP software. I am
not using the fedora/mozilla/sun API, but the Novell API. So I can't
use specific functions if they exist.
There are three concepts I would like to integrate :
- Password must be changed after a reset
- Password expiration warning
- Password expired
How can I detect these three events ?
I'm not sure. You may want to ask on a Novell list to find out what is
supported by their API. But in general, these events are returned to
all LDAPv3 clients in the form of controls, so as long as the Novell API
allows you to receive and parse the response controls, you should be
able to get all of that information.
Moreover, what can I do within the maximum login attempts ? Only
then change the password ?
Yes. Fedora DS allows a configurable number of "grace logins" - the
user is only allowed to BIND, then change their password.
Thank you very much, and congratulations for this beautiful software
Fedora-directory-users mailing list