[389-users] Re: Account Policy Plugin combined with user policy and "passwordexp: off" impossible?

2020-09-30 Thread Eugen Lamers
Hi Simon, does that mean that it is impossible to achieve the goal with the Account Policy Plugin or some other plugin? It could be that the plugin indeed is designed to achieve it but it could not because of bugs, or it simply is not designed to do this. Your idea means to go the other way

[389-users] Re: Account Policy Plugin combined with user policy and "passwordexp: off" impossible?

2020-09-21 Thread Simon Pichugin
Hi Eugen, okay, another option will be to define Local Account Policy for the users you want to be locked after the expiration. Check out this setup for Local Account Policy (CoS configuration):

[389-users] Re: Account Policy Plugin combined with user policy and "passwordexp: off" impossible?

2020-09-17 Thread Eugen Lamers
Hi Simon, thanx for your help. But it is rather the other way round: The customer already has the policy for special users that must not be forced to change the password. In addition, the customer now wants "normal" users to be completely locked out when the password has expired, only

[389-users] Re: Account Policy Plugin combined with user policy and "passwordexp: off" impossible?

2020-09-16 Thread Simon Pichugin
Hi Eugen, if I understood correctly, the customer already has Password Policy set up for common users which should not be able to change the password after the expiration. And the customer needs another policy for the special users which should be able to change the password after expiration (or