Hi Attila,

please check if your user can read the attribute "shadowLastChange". LAM will only update the value if it is visible/existing. You can also use an admin bind user for the self service and tick "Use for all operations" in self service profile, first tab.

Best regards

Roland


Am 08.08.22 um 12:10 schrieb KATONA Istvan-Attila:
*This email contains one or more catchphrase(s), like password/passwort, 
voicemail, etc. which may be used by attackers.*
Hi!

We noticed through the complaint of a user that when a user changes their 
password through selfservice, the shadowLastChange attribute is not updated, so 
the user continues getting password expiration warnings, even though the 
password was changed.

We also tried the password self-reset while investigating this issue, and it 
updated the shadowLastChange value properly. Also users can change their 
password using the passwd command on LDAP-integrated systems and that also 
updates shadowLastChange, so I think we can exclude an issue with our OpenLDAP 
server.

We are currently using LAM Pro version 8.0.1 and we suspect that this issue 
appeared since one of the last updates, because we did not have such complaints 
from users in the past.
Is there some new configuration option that we missed maybe during one of the 
updates?

Thanks & best regards,
Attila KATONA
IT Systems Engineer
FREQUENTIS AG



_______________________________________________
Lam-public mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lam-public


_______________________________________________
Lam-public mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lam-public

Reply via email to