[Date Prev][Date Next] [Chronological] [Thread] [Top]

PPolicy: Multiple pwdGraceUseTime attributes

To: <openldap-technical@openldap.org>
Subject: PPolicy: Multiple pwdGraceUseTime attributes
From: "Ulrich Windl" <Ulrich.Windl@rz.uni-regensburg.de>
Date: Mon, 19 Aug 2019 11:31:19 +0200
Content-disposition: inline

Hi!

I noticed that one user has multiple pwdGraceUseTime attributes like this:
 pwdGraceUseTime: 20190409095627Z
 pwdGraceUseTime: 20190605063107Z
 pwdGraceUseTime: 20190614121258Z
 pwdGraceUseTime: 20190723062401Z

I don't understand: Doesn't the pwdGraceUseTime record how long/often the user may login despite of an expired password?
For the example given, I assume the user has changed the password a few time since the inital grace login. So aren't the older pwdGraceUseTime attributes removed after the password was changed? Or can this happen if some admin chnages the password using some plain replace operation?

Regards,
Ulrich

Follow-Ups:
- Re: PPolicy: Multiple pwdGraceUseTime attributes
  - From: Quanah Gibson-Mount <quanah@symas.com>

Prev by Date: Antw: Re: mdb index reporting available?
Next by Date: Re: mdb index reporting available?
Index(es):
- Chronological
- Thread