I have just upgraded a few of my machines from Fedora 17 to Fedora 18 (sssd-1.9.4-3.fc18.x86_64) and on the F18 machines, users are now presented with the "Your password will expire in 204 days..." message. All machines are connected to an F17 FreeIPA server (freeipa-server-2.2.1-2.fc17.x86_64) which has the "Password Expiration Notification (days)" set to 30.
I've been reading up on the "pam_pwd_expiration_warning (integer)" variable in the sssd.conf man page, and the default is supposed to be "0", which I think should allow the FreeIPA configuration to pass through.
Is there something I'm missing here? I'm pretty sure people don't need to see the prompt at every login for the next 204 days, even though i bet some of them will still not have changed their password ;)
Thanks in advance. -A
On 02/18/2013 01:12 AM, Anthony Messina wrote:
I have just upgraded a few of my machines from Fedora 17 to Fedora 18 (sssd-1.9.4-3.fc18.x86_64) and on the F18 machines, users are now presented with the "Your password will expire in 204 days..." message. All machines are connected to an F17 FreeIPA server (freeipa-server-2.2.1-2.fc17.x86_64) which has the "Password Expiration Notification (days)" set to 30.
I've been reading up on the "pam_pwd_expiration_warning (integer)" variable in the sssd.conf man page, and the default is supposed to be "0", which I think should allow the FreeIPA configuration to pass through.
Is there something I'm missing here? I'm pretty sure people don't need to see the prompt at every login for the next 204 days, even though i bet some of them will still not have changed their password ;)
Thanks in advance. -A
You are hitting a known issue. We are working on it. https://fedorahosted.org/sssd/ticket/1808 A workaround is to set the value to some non zero number.
sssd-users mailing list sssd-users@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/sssd-users
On Mon, Feb 18, 2013 at 12:12:32AM -0600, Anthony Messina wrote:
I have just upgraded a few of my machines from Fedora 17 to Fedora 18 (sssd-1.9.4-3.fc18.x86_64) and on the F18 machines, users are now presented with the "Your password will expire in 204 days..." message. All machines are connected to an F17 FreeIPA server (freeipa-server-2.2.1-2.fc17.x86_64) which has the "Password Expiration Notification (days)" set to 30.
I've been reading up on the "pam_pwd_expiration_warning (integer)" variable in the sssd.conf man page, and the default is supposed to be "0", which I think should allow the FreeIPA configuration to pass through.
Is there something I'm missing here? I'm pretty sure people don't need to see the prompt at every login for the next 204 days, even though i bet some of them will still not have changed their password ;)
Thanks in advance. -A
Hi Anthony,
you are hitting bug https://fedorahosted.org/sssd/ticket/1808 A patch is already on the list. Once it's peer-reviwed, I'll submit an update for Fedora.
I also cloned the updstream ticket to https://bugzilla.redhat.com/show_bug.cgi?id=912223 so that we can track the problem in Fedora. Sorry for the inconvenience.
On Monday, February 18, 2013 08:26:54 AM Jakub Hrozek wrote:
On Mon, Feb 18, 2013 at 12:12:32AM -0600, Anthony Messina wrote:
I have just upgraded a few of my machines from Fedora 17 to Fedora 18 (sssd-1.9.4-3.fc18.x86_64) and on the F18 machines, users are now presented with the "Your password will expire in 204 days..." message. All machines are connected to an F17 FreeIPA server (freeipa-server-2.2.1-2.fc17.x86_64) which has the "Password Expiration Notification (days)" set to 30.
I've been reading up on the "pam_pwd_expiration_warning (integer)" variable in the sssd.conf man page, and the default is supposed to be "0", which I think should allow the FreeIPA configuration to pass through.
Is there something I'm missing here? I'm pretty sure people don't need to see the prompt at every login for the next 204 days, even though i bet some of them will still not have changed their password ;)
Thanks in advance. -A
Hi Anthony,
you are hitting bug https://fedorahosted.org/sssd/ticket/1808 A patch is already on the list. Once it's peer-reviwed, I'll submit an update for Fedora.
I also cloned the updstream ticket to https://bugzilla.redhat.com/show_bug.cgi?id=912223 so that we can track the problem in Fedora. Sorry for the inconvenience.
Not a problem at all. Thanks to both you and Dmitri for the quick Monday morning response. It's still overnight here ;) -A
On Monday, February 18, 2013 01:37:21 AM Anthony Messina wrote:
On Monday, February 18, 2013 08:26:54 AM Jakub Hrozek wrote:
On Mon, Feb 18, 2013 at 12:12:32AM -0600, Anthony Messina wrote:
I have just upgraded a few of my machines from Fedora 17 to Fedora 18 (sssd-1.9.4-3.fc18.x86_64) and on the F18 machines, users are now presented with the "Your password will expire in 204 days..." message. All machines are connected to an F17 FreeIPA server (freeipa-server-2.2.1-2.fc17.x86_64) which has the "Password Expiration Notification (days)" set to 30.
I've been reading up on the "pam_pwd_expiration_warning (integer)" variable in the sssd.conf man page, and the default is supposed to be "0", which I think should allow the FreeIPA configuration to pass through.
Is there something I'm missing here? I'm pretty sure people don't need to see the prompt at every login for the next 204 days, even though i bet some of them will still not have changed their password
Thanks in advance. -A
Hi Anthony,
you are hitting bug https://fedorahosted.org/sssd/ticket/1808 A patch is already on the list. Once it's peer-reviwed, I'll submit an update for Fedora.
I also cloned the updstream ticket to https://bugzilla.redhat.com/show_bug.cgi?id=912223 so that we can track the problem in Fedora. Sorry for the inconvenience.
Not a problem at all. Thanks to both you and Dmitri for the quick Monday morning response. It's still overnight here -A
I see the fix was pushed. Thanks. -A
sssd-users@lists.fedorahosted.org
-
Anthony Joseph Messina -
Dmitri Pal -
Jakub Hrozek