Fedora directory users - Jan 2010 - [389-users] testing Enforcing password policy

hi,

which attributes are used to hold password policy information?

i want to test it and i tried to change passwordexpirationtime to
force expiration/warning but no success.

regards,

muzzol


-- 
=======================     ^ ^
     O O
    (_ _)
muzzol(a)muzzol.com
=======================jabber id: muzzol(a)jabber.dk
=======================No atribueixis qualitats humanes als ordinadors.
No els hi agrada.
======================="El gobierno español sólo habla con terroristas,
homosexuales y
catalanes, a ver cuando se decide a hablar con gente normal"
Jiménez Losantos
=======================<echelon spamming>
bomb terrorism bush aznar teletubbies
</echelon spamming>

On Tue, 2010-01-05 at 10:31 +0100, muzzol wrote: 
> hi,
> 
> which attributes are used to hold password policy information?
> 
> i want to test it and i tried to change passwordexpirationtime to
> force expiration/warning but no success.
> 
> regards,
> 
> muzzol
> 
> 
Hmm . . . off the top of my head (and exposing myself to extreme
humiliation for being completely wrong!), I think password policies are
stored as separate objects.  I don''t recall which off-hand - John

Hi muzzol!

On Tue, 05 Jan 2010, muzzol wrote:
> hi,
> 
> which attributes are used to hold password policy information?
> 
> i want to test it and i tried to change passwordexpirationtime to
> force expiration/warning but no success.
It depends, but that particular attribute is stored directly in the 
account record.  After changing it, how did you test? 

Several things could have caused your issue:

1. A typo.

2. You don''t have password expiration enabled for that user, or that
user''s part of your LDAP tree, or globally.

3. You didn''t test with something that pays attention to the 
password expiration attributes.

Just tweaking that attribute will do nothing in itself, but without
knowing what else you did or how you tested it''d be very difficult to
try to explain why it didn''t work.