Description of problem:
when creating Account Policy plug-in configuration entry stateAttrName can be either lastLoginTime or createTimestamp.
As a part of customer security compliancy, we are required to support both account inactivity and expiration. This is an urgent requirement which we are trying to realise through RHDS.
Version-Release number of selected component (if applicable):
RHDS 11.
How reproducible:
20.10.2. Account Inactivity and Account Expiration
https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/administration_guide/account-policy-plugin
Actual results:
- The alternate attribute option is a fallback when the primary attribute does not exist.
- You can set a secondary attribute in altStateAttrName, that is checked if the primary one defined in stateAttrName does not exist"
Expected results:
As a part of customer security compliance, we are required to support both account inactivity and expiration.
Additional info: