<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Juan,<br>
    <br>
    There is a work around to get it working on 1.2.11.15.  You need to
    add these attributes to the "cn=cn=nsPwPolicyEntry,
    dc=example,dc=com" or whatever subtree you added the policy to:<br>
    <br>
    objectclass: extensibleObject<br>
    passwordTrackUpdateTime: on<br>
    <br>
    In 1.2.11.16 this attribute will be added to the schema, so
    "objectclass: extensibleObject" will not be required.  It will also
    check the main config, and correctly enable this setting for
    subtree/user password policies.  You will also be able to turn it
    off for subtree/user policies if you so desire.<br>
    <br>
    Regards,<br>
    Mark<br>
    <br>
    On 09/28/2012 11:14 AM, Mark Reynolds wrote:
    <blockquote cite="mid:5065BECC.4050909@redhat.com" type="cite">
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
      Juan,<br>
      <br>
      I did reproduce the problem.  If you setup a subtree policy
      through the console, it doesn't pull in the config setting.  I'll
      file the ticket.<br>
      <br>
      Mark<br>
      <br>
      On 09/28/2012 07:09 AM, Juan Carlos Camargo wrote:
      <blockquote
        cite="mid:936883615.16206.1348830565281.JavaMail.root@eprinsa.es"
        type="cite">
        <style type="text/css">p { margin: 0; }</style>
        <div style="font-family: courier
          new,courier,monaco,monospace,sans-serif; font-size: 10pt;
          color: #000000"><span style="background-color: rgb(255, 255,
            255); ">I've installed 10.2.11.15 on a lab machine
            (fedora17) and set passwordTrackUpdateTime to on in config.
            This is the first time I'm testing this feature, I dont know
            if this also happens in former 10.2.11x versions.  I've
            noticed that whenever a password policy is applied to an
            user, either directly or inherited from branch/ou, the
            pwdUpdateTime stops updating upon password changes. If I
            remove the password policy then the attribute works as
            expected. Is this the correct behaviour?</span><br
            style="background-color: rgb(255, 255, 255); ">
          <br style="background-color: rgb(255, 255, 255); ">
          <span style="background-color: rgb(255, 255, 255); ">Regards.</span>
          <div style="background-color: rgb(255, 255, 255); ">JC.<br>
          </div>
          <br>
          -- <br>
          <div><span name="x"></span>
            <div style="text-align: right;">
              <p><font size="2"><span style="font-family: comic sans
                    ms,comic sans,sans-serif;"><span style="font-family:
                      times new roman,new york,times,serif;"></span></span></font></p>
              <hr style="width: 100%; height: 2px; margin-left: 0px;
                margin-right: auto;">
              <p style="text-align: left;"><font size="2"><span
                    style="font-family: comic sans ms,comic
                    sans,sans-serif;"><span style="font-family: times
                      new roman,new york,times,serif;"></span></span></font></p>
              <p style="text-align: left; font-family:
                arial,helvetica,sans-serif;"><font size="1"><img
                    style="border: 0pt none;"
                    src="cid:part1.03000409.07040501@redhat.com"
                    doc="Briefcase/logo.jpg"></font></p>
              <p style="text-align: left; font-family:
                arial,helvetica,sans-serif;"><font size="1">J</font><font
                  size="1">u</font><font size="1">an Carlos Camargo
                  Carrillo  </font></p>
              <p style="text-align: left; font-family:
                arial,helvetica,sans-serif;"><font size="1"> <span
                    class="undefined"
                    id="OBJ_PREFIX_DWT503_com_zimbra_phone"><a
                      moz-do-not-send="true" href="callto:957-211157">957-211157</a></span>
                  , <span class="undefined"
                    id="OBJ_PREFIX_DWT504_com_zimbra_phone"><a
                      moz-do-not-send="true" href="callto:650932877">650932877</a></span></font></p>
            </div>
            <span name="x"></span><br>
          </div>
        </div>
        <br>
        <fieldset class="mimeAttachmentHeader"></fieldset>
        <br>
        <pre wrap="">--
389 users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
      </blockquote>
      <br>
      <pre class="moz-signature" cols="72">-- 
Mark Reynolds
Red Hat, Inc
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:mreynolds@redhat.com">mreynolds@redhat.com</a></pre>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">--
389 users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
    </blockquote>
    <br>
    <pre class="moz-signature" cols="72">-- 
Mark Reynolds
Red Hat, Inc
<a class="moz-txt-link-abbreviated" href="mailto:mreynolds@redhat.com">mreynolds@redhat.com</a></pre>
  </body>
</html>