On 02/18/2013 01:12 AM, Anthony Messina wrote:
I have just upgraded a few of my machines from Fedora 17 to Fedora 18 
(sssd-1.9.4-3.fc18.x86_64) and on the F18 machines, users are now presented 
with the "Your password will expire in 204 days..." message.  All machines are 
connected to an F17 FreeIPA server (freeipa-server-2.2.1-2.fc17.x86_64) which 
has the "Password Expiration Notification (days)" set to 30.

I've been reading up on the "pam_pwd_expiration_warning (integer)" variable in 
the sssd.conf man page, and the default is supposed to be "0", which I think 
should allow the FreeIPA configuration to pass through.

Is there something I'm missing here?  I'm pretty sure people don't need to see 
the prompt at every login for the next 204 days, even though i bet some of 
them will still not have changed their password ;)

Thanks in advance.  -A

You are hitting a known issue. We are working on it.
https://fedorahosted.org/sssd/ticket/1808
A workaround is to set the value to some non zero number.


      

_______________________________________________
sssd-users mailing list
sssd-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/sssd-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/