Hello All,

We run some 200 Centos7/Mate laptops, since last year they authenticate against freeipa.
Lightdm/Mate are installed using epel repo.

On Centos7.3/Lightdm 1.10.6-4.el7 things were al right, when a password expired, users would get the passwd expired field, the "new password" field en warnings if the made a mistake.
Since upgrading to Centos7.4/Lightdm 1.25.0-1.el7 things go terribly wrong. Users very often get no warning if a password expired, just an authentication failure.
Or they get no message at all.

If at that point you got to tty....and log in you do get the warnings on the command line.
The log files /var/log/secure also give clear password expired messages, only the user sees nothing.

This is a big problem because users cannot login and cannot work without interventions.

Many thanks for any help.

Greetings, J.