[horde] ldap authentication with expire password

Jan Schneider jan at horde.org
Fri Nov 22 20:11:04 UTC 2019


Zitat von Diego D'Angelo <ddangel0 at rosario.gov.ar>:

> I need the horde to notify me when my password is about to expire  
> and / or not let me log in if it is expired with the respective  
> message.
>
> I use ldap authentication and the users objectclass have shadowaccount.
> Users have the shadowLastChange attribute.
> Could it be that I need to add some more attribute?
>
> Try putting the following in conf.php
> $ conf ['auth'] ['params'] ['minage'] = '10';
> $ conf ['auth'] ['params'] ['maxage'] = '10';
> $ conf ['auth'] ['params'] ['warnage'] = '5';
> $ conf ['auth'] ['params'] ['password_expiration'] = 'yes';
>
> and in my user the shadowlastchange indicates that I changed the  
> password 30 days ago but still letting me log in.
>
> Something is escaping me and I am not realizing what it is, can  
> someone help me?
> Thanks!

With LDAP, those settings are retrieved via the appropriate LDAP  
attributes, namely shadowmax, shadowmin, shadowlastchange, and  
shadowwarning, if not using AD or DS.

-- 
Jan Schneider
The Horde Project
https://www.horde.org/



More information about the horde mailing list