Openldap 2.4.39

Adding in policy in already running OpenLDAP installation. Mostly functional – I was locked out after failed password attempts as expected.

Existing user with password beyond expiration is an issue. It is extended grace logins as expected but when I try to change the password, I get an error which appears to be  “error 16 – modify/delete: pwdGraceUseTime: no such attribute”

But there is that attribute.

# ldapsearch -x -h localhost '(uid=craig.white)' +

Enter LDAP Password:

# extended LDIF

#

# LDAPv3

# base <dc=obscured> (default) with scope subtree

# filter: (uid=craig.white)

# requesting: +

#

# craig.white, People, obscured

dn: uid=craig.white,ou=People,dc=obscured

entryUUID: c4ae47b4-c3e9-1033-8b0f-497efc42df64

creatorsName: cn=root,dc=obscured

createTimestamp: 20140829170048Z

pwdChangedTime: 20150730153646Z

structuralObjectClass: inetOrgPerson

pwdPolicySubentry: cn=personnelpp,ou=Policies,dc=obscured

pwdGraceUseTime: 20150827230337Z

pwdGraceUseTime: 20150827230344Z

pwdGraceUseTime: 20150827230351Z

pwdGraceUseTime: 20150827230430Z

pwdGraceUseTime: 20150827230441Z

pwdGraceUseTime: 20150827230847Z

pwdGraceUseTime: 20150827230855Z

pwdGraceUseTime: 20150827231032Z

pwdGraceUseTime: 20150827231039Z

pwdGraceUseTime: 20150828152032Z

pwdGraceUseTime: 20150828152038Z

pwdGraceUseTime: 20150828152404Z

pwdGraceUseTime: 20150828152410Z

pwdGraceUseTime: 20150828152527Z

pwdGraceUseTime: 20150828152533Z

pwdGraceUseTime: 20150828152643Z

pwdGraceUseTime: 20150828152648Z

pwdGraceUseTime: 20150828153349Z

pwdGraceUseTime: 20150828153354Z

pwdGraceUseTime: 20150828153619Z

pwdGraceUseTime: 20150828153623Z

entryCSN: 20150828154229.701657Z#000000#000#000000

modifiersName: cn=admin,dc=obscured

modifyTimestamp: 20150828154229Z

entryDN: uid=craig.white,ou=People,dc=obscured

subschemaSubentry: cn=Subschema

hasSubordinates: FALSE

# search result

search: 2

result: 0 Success

# numResponses: 2

# numEntries: 1

Why won’t it let me change my password?

Craig White

System Administrator

O 623-201-8179   M 602-377-9752

SkyTouch Technology     4225 E. Windrose Dr.     Phoenix, AZ 85032