Juan,

There is a work around to get it working on 1.2.11.15. You need to add these attributes to the "cn=cn=nsPwPolicyEntry, dc=example,dc=com" or whatever subtree you added the policy to:

objectclass: extensibleObject
passwordTrackUpdateTime: on

In 1.2.11.16 this attribute will be added to the schema, so "objectclass: extensibleObject" will not be required. It will also check the main config, and correctly enable this setting for subtree/user password policies. You will also be able to turn it off for subtree/user policies if you so desire.

Regards,
Mark

On 09/28/2012 11:14 AM, Mark Reynolds wrote:

Juan,

I did reproduce the problem. If you setup a subtree policy through the console, it doesn't pull in the config setting. I'll file the ticket.

Mark

On 09/28/2012 07:09 AM, Juan Carlos Camargo wrote:
I've installed 10.2.11.15 on a lab machine (fedora17) and set passwordTrackUpdateTime to on in config. This is the first time I'm testing this feature, I dont know if this also happens in former 10.2.11x versions. I've noticed that whenever a password policy is applied to an user, either directly or inherited from branch/ou, the pwdUpdateTime stops updating upon password changes. If I remove the password policy then the attribute works as expected. Is this the correct behaviour?

Regards.
JC.

--

Juan Carlos Camargo Carrillo

957-211157 , 650932877
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
-- 
Mark Reynolds
Red Hat, Inc
mreynolds@redhat.com
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

-- 
Mark Reynolds
Red Hat, Inc
mreynolds@redhat.com