Hi muzzol! On Tue, 05 Jan 2010, muzzol wrote: > hi, > > which attributes are used to hold password policy information? > > i want to test it and i tried to change passwordexpirationtime to > force expiration/warning but no success. It depends, but that particular attribute is stored directly in the account record. After changing it, how did you test? Several things could have caused your issue: 1. A typo. 2. You don't have password expiration enabled for that user, or that user's part of your LDAP tree, or globally. 3. You didn't test with something that pays attention to the password expiration attributes. Just tweaking that attribute will do nothing in itself, but without knowing what else you did or how you tested it'd be very difficult to try to explain why it didn't work.