Hi there,
I have a problem with ppolicy and got stuck finding a solution.
I am using openldap-2.4.40-9 Oracle 7.2, the lock seems to be ignored.
This what I have configured
dn: cn=module,cn=config
objectClass: olcModuleList
cn: module
olcModuleLoad: ppolicy.la
olcModulePath: /usr/lib64/openldap
dn: olcOverlay=ppolicy,olcDatabase={2}hdb,cn=config
objectClass: olcPPolicyConfig
olcOverlay: ppolicy
olcPPolicyDefault: cn=ppolicy,ou=policies,dc=ddd
olcPPolicyUseLockout: TRUE
olcPPolicyHashCleartext: TRUE
dn: cn=ppolicy,ou=policies,dc=ddd
objectClass: top
objectClass: device
objectClass: pwdPolicyChecker
objectClass: pwdPolicy
cn: ppolicy
pwdAttribute: userPassword
pwdAllowUserChange: TRUE
pwdInHistory: 4
pwdMinLength: 8
pwdMaxFailure: 6
pwdFailureCountInterval: 1800
pwdCheckQuality: 1
pwdMustChange: TRUE
pwdGraceAuthNLimit: 3
pwdMaxAge: 3600
pwdExpireWarning: 31536000
pwdLockoutDuration: 900
pwdLockout: TRUE
pwdCheckModule: pwcheck.la
and I tried to add the attribute
pwdReset: TRUE
and
pwdAccountLockedTime: 20110214195250Z
in a specific user, however, the user is not locked and I do not even been ask to change the password
Here is what happens
ldapwhoami -e ppolicy -x -D "uid=ldap001,ou=People,dc=ddd" -W -h localhost
Enter LDAP Password:
dn:uid=ldap001,ou=People,dc=ddd
Any idea what I should check