LDAP - Reset passwordExpirationTime

Question

Hello,
I am trying to use LDAP to modify a specific user's password in
e-directory and also resetting the passwordExpirationTime to its
original expiration length. I can change the password without a problem
but every time I attempt to modify the passwordExpirationTime attribute
it sets it to 0.
We are using E-Directory 8.8 SP5 and also have Universal Password
enabled. I believe this might be where the problem lays but I'm new to
the Novell and E-Directories infrastructures.
Before posting this thread I searched the forum and I found a few
things. One thing I did try was setting the time format in seconds
before 1970 instead of the YYMMddHHmmssZ format. When I did this I
received a LDAP "Constraint Violation" error. Any ideas? Thanks in
advance!
Tim Burrows
Application Developer
M.S. Kennedy Corporation
tburrows315
tburrows315's Profile: http://forums.novell.com/member.php?userid=85424
View this thread: http://forums.novell.com/showthread.php?t=410492

Answer 1

AFAIR this is native eDirectory behaviour. If an admin and not the user
himself modifies a password with expiration time, the expiration is set
to
01.01.1980 (which might be 'zero') for security reasons. So you have to
do two steps: First modify the passwort and close! (save that change)
that task. eDir will save the password and set the password to expired
by setting the expiration time to zero. In the second step, you modify
the expiration time.
HTH
Tom
What might work also is first disabling expiration time, changing the
password
and then reenabling expiration time.
bwisupport
bwisupport's Profile: http://forums.novell.com/member.php?userid=19240
View this thread: http://forums.novell.com/showthread.php?t=410492