[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Expired password notification

Pierangelo Masarati wrote:
Michael Ströder wrote:
Andris Eiduks wrote:
ldapsearch  with option "-e ppolicy" shows info about necessary
password change.

Is possible to get the same info by BIND operation performing from
other systems side again OpenLDAP?
Or we must create special functions in application for user attributes
checking (pwdChangedTime, pwdGraceUseTime) and notification generation ?
The client applications have to support this as well by using the
password policy extended control with the bind request. Basically that's
what ldapsearch is doing when you use it with "-e ppolicy".

See also doc/drafts/draft-behera-ldap-password-policy-xx.txt in
OpenLDAP's source distribution.

Another approach could be to inform users via e-mail.

But what if users don't read emails until password expiration?

Damn! ;-)

Seriously: Discussing this to the end is beyond a short posting.

Ciao, Michael.