The account password has expired, but the web interface does not show that the password has expired

[ilanni2460]

The account password has expired, but the web interface does not show that the password has expired

[coudot]

If the password is already expired, you should have a warning on the page.

We don't display expiration date, see #19

[ilanni2460]

@coudot I mean, it didn't show the password expired, like this picture:

[coudot]

What is the pwdMaxAge of your ppolicy?

[ilanni2460]

pwdMaxAge is 7776000 , 90d

[ilanni2460]

the account is expired 2020.9.27

[coudot]

Check that this account is not linked to another ppolicy, or that the pwdMaxAge is well defined in the default ppolicy

[ilanni2460]

@coudot this is ldap config ppolicy :

this ppolicy account :

From the above two pictures, it can be clearly seen that the password policy is effective. And this password policy, we have been using it. So I guess it’s because there is a problem in the code about whether the user password has expired

[coudot]

The code is here: https://github.com/ltb-project/service-desk/blob/master/htdocs/display.php#L136

I don't see why it does not work on your side. Do you have any error in logs? Do you see requests in OpenLDAP logs?

[ilanni2460]

@coudot I have checked the ldap service and did not find any error information for the account, but I found such a line in the error log of the service-desk, but I don’t think it will be affected

[ilanni2460]

@coudot I thought of a way to put $pwdMaxAge $pwdChangedTime $changedDate $expirationDate

Print out the values ​​of these variables to see

But i don't know how to print

[coudot]

You can use "error_log" in the code to print them in logs

[ilanni2460]

@coudot ok i try ,tks

[ilanni2460]

@coudot i try in display.php the code error_log(print_r($pwdMaxAge, 1));

But there is no information in the log

[coudot]

Does the Service Desk application account have enough rights to read ppolicies entries?

[ilanni2460]

@coudot Sure enough, it is caused by no permission, you are too awesome

very tks

[coudot]

You're welcome. If you want to contribute a lang file for Chinese, it could be great!

[ilanni2460]

OK