[Fedora-directory-users] API to detect password expiration

[François Beretti]

On 3/31/06, Richard Megginson <rmeggins at redhat.com> wrote:
> François Beretti wrote:
> >  - Password must be changed after a reset
> >  - Password expiration warning
> >  - Password expired
> >
> > How can I detect these three events ?
> >
> I'm not sure.  You may want to ask on a Novell list to find out what is
> supported by their API.  But in general, these events are returned to
> all LDAPv3 clients in the form of controls, so as long as the Novell API
> allows you to receive and parse the response controls, you should be
> able to get all of that information.

Thank you for your answer. Is there a description somewhere of which
controls are used by the Directory Server ?

> Yes.  Fedora DS allows a configurable number of "grace logins" - the
> user is only allowed to BIND, then change their password.

Thank you again

François