If there is an error after ccname_file_dummy is created but before it is
renamed then the file isn't removed. This can cause a lot of files to
be created and take up inodes in a filesystem.
please see attached patches resolving
1st patch contains some minor refactoring useful for 2nd patch.
How to test:
On OpenLDAP following attributes should be set:
* shadowMax - how many days after shadowLastChange will password expire
* shadowWarning - how many days before password expires should warning
In sssd.conf domain section should contain something similar to:
access_provider = ldap
ldap_access_order = expire, expire_policy
ldap_account_expire_policy = shadow
ldap_pwd_policy = shadow