Ok, how can I add a new operational attribute to schema? I've tried several ways, but they didn't work. When I created a new class based on 'inetorgperson' (e.g., 'inetorgpersonex') I couldn't create object of this class or change class of existing object (user account) by means of Fedora admin console. I've tried to configure password policy too. But with enabled option 'user must change password after reset' and when administrator change user's password user succefully logins with new password and there are no exceptions or warnings that he must change it. My program is using Novell JLDAP library, just in case. Thank you in advance! -----Original Message----- From: Rich Megginson <rmeggins at redhat.com> To: Leonid Bogdanov <leonid_bogdanov at mail.ru>, "General discussion list for the 389 Directory server project." <fedora-directory-users at redhat.com> Date: Thu, 16 Jul 2009 09:15:13 -0600 Subject: Re: [389-users] Adding custom attribute to class > Leonid Bogdanov wrote: > > Hello! > > > > How can I add custom attribute to 'inetorgperson' class? Preferably without inheritance. > You should never add custom attributes to standard objectclasses such as > inetOrgPerson. You should always extend the schema through inheritance > (or create a new operational attribute if you must). > > The problem is that I want to have boolean attribute which I can check in my program and tell user that he must change password after admin reset. Something like 'pwdReset' attribute in OpenLDAP. > > > If you configure the password policy so that the user must change the > password after a reset > http://www.redhat.com/docs/manuals/dir-server/8.1/admin/User_Account_Management.html#User_Account_Management-Managing_the_Password_Policy > > Will that do what you want? You can also check the operational > attribute passwordExpirationTime > > Thank you! > > > > -- > > 389 users mailing list > > 389-users at redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > ATTACHMENT: application/x-pkcs7-signature (smime.p7s) >
