Closed ilanni2460 closed 3 years ago
If the password is already expired, you should have a warning on the page.
We don't display expiration date, see #19
@coudot I mean, it didn't show the password expired, like this picture:
What is the pwdMaxAge of your ppolicy?
pwdMaxAge is 7776000 , 90d
the account is expired 2020.9.27
Check that this account is not linked to another ppolicy, or that the pwdMaxAge is well defined in the default ppolicy
@coudot this is ldap config ppolicy :
this ppolicy account :
From the above two pictures, it can be clearly seen that the password policy is effective. And this password policy, we have been using it. So I guess it’s because there is a problem in the code about whether the user password has expired
The code is here: https://github.com/ltb-project/service-desk/blob/master/htdocs/display.php#L136
I don't see why it does not work on your side. Do you have any error in logs? Do you see requests in OpenLDAP logs?
@coudot I have checked the ldap service and did not find any error information for the account, but I found such a line in the error log of the service-desk, but I don’t think it will be affected
@coudot I thought of a way to put $pwdMaxAge $pwdChangedTime $changedDate $expirationDate
Print out the values of these variables to see
But i don't know how to print
You can use "error_log" in the code to print them in logs
@coudot ok i try ,tks
@coudot i try in display.php the code error_log(print_r($pwdMaxAge, 1));
But there is no information in the log
Does the Service Desk application account have enough rights to read ppolicies entries?
@coudot Sure enough, it is caused by no permission, you are too awesome
very tks
You're welcome. If you want to contribute a lang file for Chinese, it could be great!
OK
The account password has expired, but the web interface does not show that the password has expired![0](https://user-images.githubusercontent.com/5058391/95843764-a7f5b100-0d7a-11eb-906a-1decd73082af.png)