I set one LDAP user 'Password expiration date' to 08.03.2018 in fusion directory and the account status shows 'expired'

I tested the login via both Ubuntu 16.04 and Ubuntu 17.10 machine.

  • Ubuntu 16.04 -- still allowed the user to login
  • Ubuntu 17.10 -- blocked the user 'Your account has expired; please contact your system administrator'

also tested to login fusion directory with message 'Account locked. Please contact your system administrator! '

My question is why Ubuntu 16.04 still allows locked user to login ???

  • What client side package are you using for accessing the directory? sssd? nslcd? – Sebastian Stark Mar 13 '18 at 10:36
  • actually, sssd is used. – Andy TENG Mar 13 '18 at 14:03
  • I do not have both versions available for testing, but maybe ldap_pwd_policy (/etc/sssd/sssd.conf) is not set correctly on 16.04 – Sebastian Stark Mar 13 '18 at 14:23

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.