[Freeipa-users] LDAP Authentication with expired passwords

[Matthew Symonds]

We have a few services using IPA via LDAP.

E.G. Apache connecting
to ldap://<snip>/cn=users,cn=accounts,dc=ipa,dc=<snip>?uid

This works fine but users with expired passwords are still able to
authenticate.

Is there any way to stop this in FreeIPA, or do I have to
check krbPasswordExpiration in my user filter?

Thanks
Matt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140410/356d71a0/attachment.htm>