Re: [389-users] Disable Inactive Users After 90 days

2012-05-09 Thread Rich Megginson
On 05/09/2012 07:45 AM, Ali Jawad wrote: Hi I have a requirement to disable inactive users after 90 days. I did read http://directory.fedoraproject.org/wiki/Account_Policy_Design but I am not sure whether this is a design proposal or the actual implementation. My DS version is : rpm -qa |

Re: [389-users] Disable Inactive Users After 90 days

2012-05-09 Thread Rich Megginson
On 05/09/2012 08:17 AM, Ali Jawad wrote: Hi Thanks Rich, just what I was searching for, I am facing a problem though ldapmodify: No such object (32) matched DN: dc=domain,dc=localat : [user@server ~]$ ldapmodify*-a* -D cn=directory manager -w secret -p 389 -hserver.example.com

Re: [389-users] Disable Inactive Users After 90 days

2012-05-09 Thread Ali Jawad
Hi Rich Your help is highly appreciated, I got it working, thanks for your patience. Regards On Wed, May 9, 2012 at 5:19 PM, Rich Megginson rmegg...@redhat.com wrote: On 05/09/2012 08:17 AM, Ali Jawad wrote: Hi Thanks Rich, just what I was searching for, I am facing a problem though

Re: [389-users] Disable Inactive Users After 90 days

2012-05-09 Thread Ali Jawad
Hi Rich Seems I still got a problem, the users can't logon anymore, I did try to dn: uid=username,ou=people,dc=domain,dc=local changetype: delete delete: lastLoginTime But I keep getting ldapmodify: extra lines at end (line 3 of entry uid=username,ou=people,dc=domain,dc=local) I checked for

Re: [389-users] Disable Inactive Users After 90 days

2012-05-09 Thread Rich Megginson
On 05/09/2012 10:09 AM, Ali Jawad wrote: Hi Rich Seems I still got a problem, the users can't logon anymore, I did try to dn: uid=username,ou=people,dc=domain,dc=local changetype: delete delete: lastLoginTime But I keep getting ldapmodify: extra lines at end (line 3 of entry

Re: [389-users] Disable Inactive Users After 90 days

2012-05-09 Thread Jim Finn
Are you doing this via an ldif file or stdin? Try echo -e dn: uid=username,ou=people,dc=domain,dc=local\nchangetype: delete\ndelete: lastLoginTime\n\n | ldapmodify -x -h yourhost -Dcn=directory manager -wPaSsWoRd Jim On Wed, May 9, 2012 at 11:09 AM, Rich Megginson rmegg...@redhat.com wrote:

Re: [389-users] Disable Inactive Users After 90 days

2012-05-09 Thread Ali Jawad
Stdin, problem is even new users cant register anymore. Not just existing ones..will tset your suggestion Regards On Wed, May 9, 2012 at 7:13 PM, Jim Finn jamespf...@gmail.com wrote: Are you doing this via an ldif file or stdin? Try echo -e dn:

[389-users] Disable Inactive Users After 90 days

2012-05-09 Thread Ali Jawad
Hi I have a requirement to disable inactive users after 90 days. I did read http://directory.fedoraproject.org/wiki/Account_Policy_Design but I am not sure whether this is a design proposal or the actual implementation. My DS version is : rpm -qa | grep 389 389-admin-console-1.1.8-1.el5

Re: [389-users] Disable Inactive Users After 90 days

2012-05-09 Thread Ali Jawad
Hi Thanks Rich, just what I was searching for, I am facing a problem though ldapmodify: No such object (32) matched DN: dc=domain,dc=localat : [user@server ~]$ ldapmodify *-a* -D cn=directory manager -w secret -p 389 -h server.example.com -x dn: cn=Account Inactivation Policy,dc=example,dc=com