openldap 2.4.40 ppolicy module and shadowInactive equivalent

["Real, Elizabeth (392K)" <Elizabeth.Real@jpl.nasa.gov>]

Hello,

 

I setup a password policy overlay on my openldap 2.4.40 servers running RHEL7. I need to enforce the following: disable accounts that have been inactive for 180 days. In the past we were able to do this by simply adding the shadowInactive attribute to each account: shadowInactive 180. But with the new openldap, it appears there is no equivalent attribute??

 

http://www.openldap.org/doc/admin24/

http://www.zytrax.com/books/ldap/ch6/ppolicy.html

 

Thank you,

Liz