[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ppolicy and pwdGraceUseTime


I think you are confusing between the password expiration and account lockout.

If your account is locked after several failed attempts to bind, you cannot modify your passwords.


Le 28/08/2015 18:37, Craig White a écrit :
Openldap 2.4.39

Adding in policy in already running OpenLDAP installation. Mostly
functional – I was locked out after failed password attempts as expected.

Existing user with password beyond expiration is an issue. It is
extended grace logins as expected but when I try to change the password,
I get an error which appears to be  “error 16 – modify/delete:
pwdGraceUseTime: no such attribute”

*Abdelhamid Meddeb*

Attachment: smime.p7s
Description: Signature cryptographique S/MIME