[SSSD-users] Fedora 18, FreeIPA and password expiration warning

Jakub Hrozek jhrozek at redhat.com
Mon Feb 18 07:26:54 UTC 2013


On Mon, Feb 18, 2013 at 12:12:32AM -0600, Anthony Messina wrote:
> I have just upgraded a few of my machines from Fedora 17 to Fedora 18 
> (sssd-1.9.4-3.fc18.x86_64) and on the F18 machines, users are now presented 
> with the "Your password will expire in 204 days..." message.  All machines are 
> connected to an F17 FreeIPA server (freeipa-server-2.2.1-2.fc17.x86_64) which 
> has the "Password Expiration Notification (days)" set to 30.
> 
> I've been reading up on the "pam_pwd_expiration_warning (integer)" variable in 
> the sssd.conf man page, and the default is supposed to be "0", which I think 
> should allow the FreeIPA configuration to pass through.
> 
> Is there something I'm missing here?  I'm pretty sure people don't need to see 
> the prompt at every login for the next 204 days, even though i bet some of 
> them will still not have changed their password ;)
> 
> Thanks in advance.  -A

Hi Anthony,

you are hitting bug https://fedorahosted.org/sssd/ticket/1808 A patch is
already on the list. Once it's peer-reviwed, I'll submit an update for
Fedora.

I also cloned the updstream ticket to
https://bugzilla.redhat.com/show_bug.cgi?id=912223 so that we can track
the problem in Fedora. Sorry for the inconvenience.


More information about the sssd-users mailing list