I realize I'm trying to use the ppolicy overlay a little differently
from how it was designed to be used. The problem is that the ppolicy
overlay is the closest thing I have found.
My use case:
1) I want to be able to disable users. I can do this by setting:
That works. Great!
2) I want to be able to set a date in the future when a user account
will expire / deactivate.
I was hoping to be able to set "pwdAccountLockedTime" to a date in the
future and after that date the user account would be locked.
Unfortunately this isn't the case. ppolicy seems to lock out every
account that has the "pwdAccountLockedTime" attribute set to a valid value.
Reading the source code for ppolicy I find an interesting block in the
function "account_locked()" at line 356:
/* Still in the future? not yet in effect */
if (now < then)
This leads me to believe that the author's intension may have been to
allow what I want to do.
Perhaps is there another attribute I need to set in order to tweek
ppolicy to do wat I want. Here's how the default policy looks like:
All help greatly appreciated!