[389-users] LDAP chaining issue with password changes

[Randall Wood]

I have a Fedora Directory Server (version 1.1) on an appliance that is
chained to a CentOS Directory Server version 8.1 that is storing my
user's accounts. The appliance manages client systems that the users log
onto.

I am attempting to implement a password policy on the system that:
1) requires users to change their password on first logon after the
account is created or on first logon after an administrator has reset
their password.
2) requires that users are not allowed to change their password more
than once per day.

For some reason, users are only able to change their password on first
logon if I set the minimum age of the password to 0.

Does anyone have any recommendations concerning how to determine what
may be going on?

Thank you,

Randall Wood
Secure Systems Engineer
Trusted Computer Solutions
2350 Corporate Park Drive, Suite 500
Herndon, Virginia 20170
Tel [phone] | Fax [phone]
rwood(a)trustedcs.com
http://www.trustedcs.com