I have a Fedora Directory Server (version 1.1) on an appliance that is chained to a CentOS Directory Server version 8.1 that is storing my user's accounts. The appliance manages client systems that the users log onto. I am attempting to implement a password policy on the system that: 1) requires users to change their password on first logon after the account is created or on first logon after an administrator has reset their password. 2) requires that users are not allowed to change their password more than once per day. For some reason, users are only able to change their password on first logon if I set the minimum age of the password to 0. Does anyone have any recommendations concerning how to determine what may be going on? Thank you, Randall Wood Secure Systems Engineer Trusted Computer Solutions 2350 Corporate Park Drive, Suite 500 Herndon, Virginia 20170 Tel (703) 537-4382 | Fax (703) 318-5041 rwood at trustedcs.com http://www.trustedcs.com