Re: Expired password notification

[Michael Ströder <michael@stroeder.com>]

Pierangelo Masarati wrote:
> Michael Ströder wrote:
> > Andris Eiduks wrote:
> > > ldapsearch  with option "-e ppolicy" shows info about necessary
> > > password change.
> > >
> > > Is possible to get the same info by BIND operation performing from
> > > other systems side again OpenLDAP?
> > > Or we must create special functions in application for user attributes
> > > checking (pwdChangedTime, pwdGraceUseTime) and notification generation ?
> > The client applications have to support this as well by using the
> > password policy extended control with the bind request. Basically that's
> > what ldapsearch is doing when you use it with "-e ppolicy".
> >
> > See also doc/drafts/draft-behera-ldap-password-policy-xx.txt in
> > OpenLDAP's source distribution.
> >
> > Another approach could be to inform users via e-mail.
>
> But what if users don't read emails until password expiration?

Damn! ;-)

Seriously: Discussing this to the end is beyond a short posting.

Ciao, Michael.