Hi,

you are missing the ldap_access_order option:

> ldap_access_order = pwd_expire_policy_warn

Please check sssd-ldap(5) for more information.

HTH,



On Mon, Feb 3, 2025 at 11:33 AM Rodrigo Prieto via sssd-users <
sssd-users@lists.fedorahosted.org> wrote:

> Hello, I am trying to configure warnings when a password is about to
> expire. I added the following in the sssd.conf file:
>
> ldap_pwd_policy = shadow
> pwd_expiration_warning = 7
>
> I create a user with shadow enabled, but when logging in, no warning is
> displayed. In nslcd, the shadow attributes work fine, but in sssd, I
> can't get them to work.
>
> The ACLs are configured on the OpenLDAP server.
>
> Can someone guide me on what I might be doing wrong?
>
> Best regards.
> --
> _______________________________________________
> sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue
>


-- 
Alejandro
-- 
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to