[Freeipa-users] LDAP Authentication with expired passwords

2014-04-10 Thread Matthew Symonds
We have a few services using IPA via LDAP. E.G. Apache connecting to ldap://snip/cn=users,cn=accounts,dc=ipa,dc=snip?uid This works fine but users with expired passwords are still able to authenticate. Is there any way to stop this in FreeIPA, or do I have to check krbPasswordExpiration in my

Re: [Freeipa-users] LDAP Authentication with expired passwords

2014-04-10 Thread Dmitri Pal
On 04/10/2014 08:03 AM, Matthew Symonds wrote: We have a few services using IPA via LDAP. E.G. Apache connecting to ldap://snip/cn=users,cn=accounts,dc=ipa,dc=snip?uid This works fine but users with expired passwords are still able to authenticate. Is there any way to stop this in