Has anyone ever run into an issue whereby when you expire a user's password, 
and they login, they can change their password and it updates correctly; but 
then on the followup login the new password is also expired, and pam.d forces 
me to change it again, infinitely looping.

I assume have something wrong with my setup whereby everything works, including 
the password change and expire; but when the change happens some field is not 
being updated so that it shows that the password is no longer expired.

I thought it might have something to do with acl's and shadowLastChange; but my 
setup seems valid;

# from slapd.conf

access to attrs=userPassword,shadowLastChange
        by self write
        by dn="cn=authenticator,dc=dom,dc=net" auth
        by dn="cn=Manager,dc=dom,dc=net" write
        by anonymous auth
        by * none

-r
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Lam-public mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lam-public

Reply via email to