[389-users] testing Enforcing password policy

[patrick.morris at hp.com]

Hi muzzol!

On Tue, 05 Jan 2010, muzzol wrote:

> hi,
> 
> which attributes are used to hold password policy information?
> 
> i want to test it and i tried to change passwordexpirationtime to
> force expiration/warning but no success.

It depends, but that particular attribute is stored directly in the 
account record.  After changing it, how did you test? 

Several things could have caused your issue:

1. A typo.

2. You don't have password expiration enabled for that user, or that
user's part of your LDAP tree, or globally.

3. You didn't test with something that pays attention to the 
password expiration attributes.

Just tweaking that attribute will do nothing in itself, but without
knowing what else you did or how you tested it'd be very difficult to
try to explain why it didn't work.