On Wed, 2012-06-27 at 12:57 +0200, Angel Bosch wrote:
(Wed Jun 27 12:38:35 2012) [sssd[be[example.net]]]
[string_to_shadowpw_days] (0x0020): Input string contains not allowed negative value [-1].
Note this message right here: You have a user that contains '-1' as the
value of one of their shadow entries. It looks like we're not handling
this properly. The shadow processing should accept -1 (and only that
singular negative value) as meaning "never" or "infinite" as
appropriate.
Angel, please file a bug on this.