LDAP password aging

From: Karl.Rossing@Federated.CA
Date: Thu Apr 03 2003 - 14:55:54 EST


As i understand it, there is no password aging functionality in LDAP.

All our users usually make shell connections to our Solaris box. I'm
wondering if there are any perl/shell scripts to:
1) check when a users passwd was last changed. I'm not sure how to query
this in ldap or if it's possible.
2) force the user to change their passwd is older the x days. Something
simple would be via /etc/profile. If /export/home/username/.passwd-changed
is older than x days, force the user the passwd prompt or else continue
with the login script.

Any thoughts?

Thanks
Karl
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:26:08 EDT