Quanah, I found little information on this contrib nssov overlay: http://www.openldap.org/doc/admin24/guide.html#nssov
How do you implement it? Is it similar to adding the ppolicy overlay? Thank you, Liz From: Quanah Gibson-Mount <[email protected]> Reply-To: Quanah Gibson-Mount <[email protected]> Date: Monday, October 24, 2016 at 6:29 PM To: "Real, Elizabeth (392K)" <[email protected]>, "[email protected]" <[email protected]> Subject: Re: openldap 2.4.40 ppolicy module and shadowInactive equivalent --On Monday, October 24, 2016 7:43 PM +0000 "Real, Elizabeth (392K)" <[email protected]<mailto:[email protected]>> wrote: I setup a password policy overlay on my openldap 2.4.40 servers running RHEL7. I need to enforce the following: disable accounts that have been inactive for 180 days. In the past we were able to do this by simply adding the shadowInactive attribute to each account: shadowInactive 180. But with the new openldap, it appears there is no equivalent attribute?? OpenLDAP ppolicy has never supported that attribute, as far as I know. I believe you are looking for the contrib nssov overlay, which does support it. Hope that helps! Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>
