hi,

which attributes are used to hold password policy information?

i want to test it and i tried to change passwordexpirationtime to
force expiration/warning but no success.

regards,

muzzol


--
========================
^ ^
O O
(_ _)
muzzol(a)muzzol.com
========================
jabber id: muzzol(a)jabber.dk
========================
No atribueixis qualitats humanes als ordinadors.
No els hi agrada.
========================
"El gobierno español sólo habla con terroristas, homosexuales y
catalanes, a ver cuando se decide a hablar con gente normal"
Jiménez Losantos
========================
<echelon spamming>
bomb terrorism bush aznar teletubbies
</echelon spamming>

--
389 users mailing list
389-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users

On Tue, 2010-01-05 at 10:31 +0100, muzzol wrote:
> hi,
>
> which attributes are used to hold password policy information?
>
> i want to test it and i tried to change passwordexpirationtime to
> force expiration/warning but no success.
>
> regards,
>
> muzzol
>
>
Hmm . . . off the top of my head (and exposing myself to extreme
humiliation for being completely wrong!), I think password policies are
stored as separate objects. I don't recall which off-hand - John

--
389 users mailing list
389-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Hi muzzol!

On Tue, 05 Jan 2010, muzzol wrote:

> hi,
>
> which attributes are used to hold password policy information?
>
> i want to test it and i tried to change passwordexpirationtime to
> force expiration/warning but no success.

It depends, but that particular attribute is stored directly in the
account record. After changing it, how did you test?

Several things could have caused your issue:

1. A typo.

2. You don't have password expiration enabled for that user, or that
user's part of your LDAP tree, or globally.

3. You didn't test with something that pays attention to the
password expiration attributes.

Just tweaking that attribute will do nothing in itself, but without
knowing what else you did or how you tested it'd be very difficult to
try to explain why it didn't work.

--
389 users mailing list
389-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users