ldap-ux with openldap 2.3 ppolicy

[Dale Renton]

Hello all,

Does anyone have password expiration working with ldap-ux and openldap's ppolicy ? Currently when a user's password has expired they are simply disconnected. We need them to be prompted to put in a new password.

Thanks,
Dale

[Steven E. Protter]

Shalom Dale,

If you are talking about an integration with a windows PDC, the Windows login controls the expiration and forces the password change.

SEP

[Dale Renton]

We use Samba as our PDC, however not all our users are Samba users, some are only telnet users connecting to our HP-UX machine. LDAP-UX is configured to connect to our Openldap server which has ppolicy enabled. When configuring LDAP-UX you have to choose between two different types of Directory Servers : Netscape Directory or Windows 2000/2003 Active Directory. We chose Netscape Directory, we do not have a Windows Active Directory.

It seems as though LDAP-UX is simply not configured to work with Openldap's ppolicy.

Thanks