Re: expired password reset prompt (0.9.2, ppolicy)

["Trent W. Buck" <twb [at] cyber.com.au>]

Arthur de Jong wrote:
> pwdGraceAuthNLimit: 10

Hm, I don't have one of these.
That is probably the entire problem,
since slapo-ppolicy(5) says

    If this attribute is not present or if its value is zero (0),
    users with expired passwords will not be allowed to authenticate
    to the directory.

I'm *pretty* sure I didn't need that under PADL -- you were able (and
forced) to set a new password before you could get a shell or X
session.

I'll get around to actual testing later this week (I hope).

-- 
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users/