On 3/31/06, Richard Megginson <rmeggins at redhat.com> wrote: > Fran?ois Beretti wrote: > > - Password must be changed after a reset > > - Password expiration warning > > - Password expired > > > > How can I detect these three events ? > > > I'm not sure. You may want to ask on a Novell list to find out what is > supported by their API. But in general, these events are returned to > all LDAPv3 clients in the form of controls, so as long as the Novell API > allows you to receive and parse the response controls, you should be > able to get all of that information. Thank you for your answer. Is there a description somewhere of which controls are used by the Directory Server ? > Yes. Fedora DS allows a configurable number of "grace logins" - the > user is only allowed to BIND, then change their password. Thank you again Fran?ois