On 4/26/07, aleem bagwan wrote:
I m using openldap-2.3.4 version with ppolicy enabled. I have a
with the reset feature. If i set pwdReset and pwdMustChange attribute for a
user, say testuser, I can see that it works as expected using ldapsearch
command ie it never allows u to login & asks u to modify the password.
Here you binding and attempting a search with a reset password...
for the problem: At the client side(say PHP), If i bind to the server using
testuser and resetted password, i m allowed to log in..How is that
possible...it should not work that way..right..It should emulate
ldapsearch..am i right?
..and here you are just binding, I expect. With pwdReset set, you can
bind (and change your password), but you cannot perform searches.