[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Regarding password expiry in openldap fortress.

To: openldap-fortress@openldap.org
Subject: Re: Regarding password expiry in openldap fortress.
From: Shawn McKinney <shawn.mckinney@jts.us>
Date: Mon, 06 Jan 2014 08:52:12 -0600
In-reply-to: <CAJtV1dSxn0fk4OgcPiotAFeprZeq2+mYAsgWLcueEhjwV3MvjQ@mail.gmail.com>
Organization: JoshuaTree Software
References: <CAJtV1dSxn0fk4OgcPiotAFeprZeq2+mYAsgWLcueEhjwV3MvjQ@mail.gmail.com>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.0


On 01/06/2014 08:01 AM, raman nanda wrote:

Can't the user change his own password after it has expired ?

No they cannot. The correct response it to monitor pwpolicy's expiringvalue and prompt the user to change before pw expires - OR - to enablegrace on the user's pwpolicy and allow them to change while pw is withingrace period.


--
Shawn McKinney
shawn.mckinney@jts.us

Follow-Ups:
- Re: Regarding password expiry in openldap fortress.
  - From: raman nanda <ramannanda9@gmail.com>

References:
- Regarding password expiry in openldap fortress.
  - From: raman nanda <ramannanda9@gmail.com>

Prev by Date: Regarding password expiry in openldap fortress.
Next by Date: Re: Regarding password expiry in openldap fortress.
Index(es):
- Chronological
- Thread