[389-users] how to get password expiration warnings and password policy

Morris, Patrick patrick.morris at hp.com
Fri Sep 24 17:39:49 UTC 2010


  It's not true that this only tells you if it has expired.  It tells 
you *when* it will expire if it's going to, which is what Ondrej said he 
was looking for.  If you want to know, for example, if someone's 
password will expire within a week, that field will tell you.

On 9/24/2010 9:51 AM, Aaron Hagopian wrote:
> This only tells you if their password has expired but you will not 
> know if there are grace logins and this also doesn't tell you give you 
> password warnings without trying to lookup the policy.  You can get 
> all of the password information using ldap extended operations (part 
> of LDAP v3 I think).
>
> I am using this with great success in java but not sure how much is 
> implemented in PHP.  Maybe someone on this list or a php list may know 
> better.
>
>
>
> 2010/9/24 Morris, Patrick <patrick.morris at hp.com 
> <mailto:patrick.morris at hp.com>>
>
>      On 9/23/2010 8:13 PM, Ondrej Ivanič wrote:
>     > Hi,
>     >
>     > Is there any way how to query user's password policy related
>     > attributes? I'm interested in password expiration date in order to
>     > show warning message.
>
>     Just look for "passwordExpirationTime" on the account entry.  You'll
>     need to ask for it specifically.
>     --
>     389 users mailing list
>     389-users at lists.fedoraproject.org
>     <mailto:389-users at lists.fedoraproject.org>
>     https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20100924/ffb38207/attachment.html>


More information about the 389-users mailing list