Dear List, On my network we use ldap to "aging" password. Every user is definied in ldap server (openldap) with 5 attributes: shadowLastChange: 15308 shadowInactive: 30 shadowMin: 0 shadowMax: 120 shadowWarning: 30 the sssd uses 6 attributes:     shadowLastChange     shadowMin     shadowMax     shadowWarning     shadowInactive     shadowExpire We have NO shadowExpire attribute (in mathematical point of view shadowExpire = shadowLastChange+shadowLastChange). So how can we use sssd with password "aging" option....? Best Regards -- Bartłomiej Solarz-Niesłuchowski, Administrator WSISiZ e-mail: Bartlomiej.Solarz-Niesluchowski(a)wit.edu.pl tel. 223486547, fax 223486501 JID: solarz(a)jabber.wit.edu.pl 01-447 Warszawa, ul. Newelska 6, pokój 421, pon.-pt. 8-16 Motto - Jak sobie pościelisz tak sie wyśpisz