Re: [389-users] how to get password expiration warnings and password policy

[Aaron Hagopian <airhead1@xxxxxxxxx>]

What I meant is all you know is the expiration date. ÂYou will not know any of the expiration information on top of that like when to start warning, if they have already been warned or if they have used grace logins. ÂThe reason these LDAP v3 requests exist is to be able to get extra information just like this.

2010/9/24 Morris, Patrick <patrick.morris@xxxxxx>

It's not true that this only tells you if it has expired. It tells you *when* it will expire if it's going to, which is what Ondrej said he was looking for. If you want to know, for example, if someone's password will expire within a week, that field will tell you.

On 9/24/2010 9:51 AM, Aaron Hagopian wrote:

This only tells you if their password has expired but you will not know if there are grace logins and this also doesn't tell you give you password warnings without trying to lookup the policy. ÂYou can get all of the password information using ldap extended operations (part of LDAP v3 I think).

I am using this with great success in java but not sure how much is implemented in PHP. ÂMaybe someone on this list or a php list may know better.

2010/9/24 Morris, Patrick <patrick.morris@xxxxxx>

ÂOn 9/23/2010 8:13 PM, Ondrej IvaniÄ wrote:
> Hi,
>
> Is there any way how to query user's password policy related
> attributes? I'm interested in password expiration date in order to
> show warning message.

Just look for "passwordExpirationTime" on the account entry. ÂYou'll
need to ask for it specifically.

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users