Hi, you are missing the ldap_access_order option:
> ldap_access_order = pwd_expire_policy_warn Please check sssd-ldap(5) for more information. HTH, On Mon, Feb 3, 2025 at 11:33 AM Rodrigo Prieto via sssd-users < sssd-users@lists.fedorahosted.org> wrote: > Hello, I am trying to configure warnings when a password is about to > expire. I added the following in the sssd.conf file: > > ldap_pwd_policy = shadow > pwd_expiration_warning = 7 > > I create a user with shadow enabled, but when logging in, no warning is > displayed. In nslcd, the shadow attributes work fine, but in sssd, I > can't get them to work. > > The ACLs are configured on the OpenLDAP server. > > Can someone guide me on what I might be doing wrong? > > Best regards. > -- > _______________________________________________ > sssd-users mailing list -- sssd-users@lists.fedorahosted.org > To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue > -- Alejandro
-- _______________________________________________ sssd-users mailing list -- sssd-users@lists.fedorahosted.org To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue