How do I set a user's password expiration time through LDAP?

(Last modified: 05Sep2003)

This document (10086746) is provided subject to the disclaimer at the end of this document.

goal

How do I set a user's password expiration time through LDAP?

fact

Novell eDirectory

symptom

The passwordExpirationTime is set to 1/1/1992 when a user is added through LDAP

The password expiration time is set correctly when a user is added through Console One

cause

When a user password is set by an administrator the expiration time is set to 1/1/92. This is a standard eDirectory password policy. In order to change the expiration time, it must be done after the initial creation of the user.

fix

You need create the user in two steps.  First, set the password.  After that, you can set the password expiration time.  An example LDIF is included below.

dn: cn=matt,o=novell
changetype: add
sn: smith
passwordRequired: TRUE
passwordMinimumLength: 5
passwordExpirationInterval: 31536000
passwordAllowChange: TRUE
objectClass: inetOrgPerson
cn: matt
userpassword: novell

dn: cn=matt,o=novell
changetype: modify
replace: passwordExpirationTime
passwordExpirationTime: 20030710173200Z

document

Document Title: How do I set a user's password expiration time through LDAP?
Document ID: 10086746
Solution ID: NOVL92282
Creation Date: 05Sep2003
Modified Date: 05Sep2003
Novell Product Class:novell directory services

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.