[389-users] Question about expired/expiring passwords

[Morris, Patrick]

It's up to the client to support warnings about password expiration (that
true in general, not just where LDAP is involved).  I have no idea how, or
even if, WS_FTP, Filezilla or pGina support that, but I suspect they don't.

 

In my environment I've written scripts that will send emails when a password
is close to expiration, since the clients many of our users connect with
will never do it.

 

From: 389-users-bounces at lists.fedoraproject.org
[mailto:389-users-bounces at lists.fedoraproject.org] On Behalf Of
harry.devine at faa.gov
Sent: Thursday, August 09, 2012 1:02 PM
To: 389-users at lists.fedoraproject.org
Subject: [389-users] Question about expired/expiring passwords

 


In our environment, we have users that authenticate to our LDAP server in a
few ways: 

        1) they log into the server directly using SSH via PuTTY; 
        2) they log in to our server using FileZilla or WS_FTP using SFTP; 
        3) they authenticate their account via the LDAP on a Windows server
using pGina 

In method 1, they are prompted to change their password if it is expired, or
are given the warning about the password will expire in X days.  How do I
have the user get a similar warning/message when connecting via methods 2
and 3?  We have a lot of users who get themselves flustered because they
think they have the right password, but because they're never warned or
given a message, they think its wrong, put in a few more passwords, and
eventually lock their account out. 

Any ideas? 
Harry 

Harry Devine
Common ARTS Software Development
AJM-245
(609)485-4218
Harry.Devine at faa.gov

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20120809/17c462f2/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6231 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20120809/17c462f2/attachment.bin>