LDAP-UX shadowLastChange not updating

[Nat Guyton]

I've installed LDAP-UX B.03.20 and it's working well, against OpenLDAP on Linux, no less. (HPUX 11.11)

The main problem I am facing is that I've got password expiration turned on via the shadowLastChange (12447) and shadowMax (60) attributes of the shadowAccount objectclass, and I was very happy to see that when logging in, the system detected that the password had expired and demanded another. I did the usual process, and the password was updated.

Unfortunately, the shadowLastChange field was not, which meant that as soon as I was done changing my password, it demanded that I change it again (and again and again). :-( I ran ethereal (packet sniffer) on the LDAP server (Linux) and could see that the userPassword was indeed being updated, but no mention of the shadowLastChange field.

Changing the password manually via the passwd command yields the same result. Doing so on Linux does it correctly, however - updating the shadowLastChanged as well as the userPassword.

Has anybody run into this? I would like to be able to get our HP and Linux servers running from the same OpenLDAP directories, but we have a strict password expiration policy that I need to adhere to.

Thanks...

[Chris Rutledge_2]

I'm having the same problem. I thought installing HP-UX shadowPW would have fixed it, but no luck. Did you ever find the solution to this problem?

- Chris