Back to bug 1024744

Who When What Removed Added
Jakub Hrozek 2013-10-30 17:43:01 UTC Doc Text Cause: OpenLDAP and 389-DS treat the grace logins differently. 389DS treats them as "number of grace logins left" while OpenLDAP treats them as "number of grace logins used". Currently the SSSD only handles the 389DS semantics.

Consequence: When using OpenLDAP server, the grace password warning might be incorrect.

Workaround: none known.

Result:
Jakub Hrozek 2013-10-31 11:37:25 UTC Status NEW ASSIGNED
Eliska Slobodova 2013-11-04 12:35:25 UTC Doc Text Cause: OpenLDAP and 389-DS treat the grace logins differently. 389DS treats them as "number of grace logins left" while OpenLDAP treats them as "number of grace logins used". Currently the SSSD only handles the 389DS semantics.

Consequence: When using OpenLDAP server, the grace password warning might be incorrect.

Workaround: none known.

Result:
OpenLDAP and 389 Directory Server treat the grace logins differently. 389 Directory Server treats them as "number of grace logins left" while OpenLDAP treats them as "number of grace logins used". Currently the SSSD only handles the semantics used by 389 Directory server. As a result, when using OpenLDAP server, the grace password warning might be incorrect.
Doc Type Bug Fix Known Issue
Jakub Hrozek 2013-11-06 16:39:29 UTC Target Release --- 7.1
Component sssd sssd
Version 6.5 7.0
Product Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 7
Lubos Kocman 2014-11-10 14:16:46 UTC Assignee jhrozek sssd-maint
Jakub Hrozek 2014-11-10 14:44:47 UTC CC jhrozek
Aneta Šteflová Petrová 2015-02-20 10:12:35 UTC CC apetrova
Doc Text OpenLDAP and 389 Directory Server treat the grace logins differently. 389 Directory Server treats them as "number of grace logins left" while OpenLDAP treats them as "number of grace logins used". Currently the SSSD only handles the semantics used by 389 Directory server. As a result, when using OpenLDAP server, the grace password warning might be incorrect. The OpenLDAP server and the 389 Directory Server (389 DS) treat grace logins differently. 389 DS treats them as the number of grace logins left, while OpenLDAP treats them as the number of grace logins used. Currently, SSSD only handles the semantics used by 389 DS. As a result, when using OpenLDAP, the grace password warning can be incorrect.
Martin Kosek 2015-04-24 11:24:30 UTC Status ASSIGNED CLOSED
Resolution --- DEFERRED
Last Closed 2015-04-24 07:24:30 UTC
Pavel Březina 2020-05-02 17:30:35 UTC Link ID Github SSSD/sssd/issues/3178

Back to bug 1024744