Re: Configuring ppolicy problem

2012/8/29 cbulist cbulist@gmail.com:

Hi,

I got stuck with this problem. I'm able to change the user password using shadowAccount objectClass but I can't do the same using pwdPolicy objectClass. I set ppolicy attribute in order to get the password expired message:

pwdExpireWarning 10 pwdMaxAge 15 pwdMustChange TRUE pwdAllowUserChange TRUE pwdLockout TRUE

slapd.conf:

include /etc/openldap/schema/ppolicy.schema

moduleload ppolicy.la

access to attrs=userPassword by self write by users read by anonymous auth

access to * by * read

overlay ppolicy ppolicy_default "cn=default,ou=policies,dc=sample,dc=com" ppolicy_use_lockout

I really appreciate any help with this problem.

Can you show us all operational attributes from your user entry?

Clément.