DSfW: Password Expiration is not enforced when users are located in cn=users container

  • 7014544
  • 11-Feb-2014
  • 11-Feb-2014

Environment

Novell Open Enterprise Server 11.2 (OES11SP2)
Novell Open Enterprise Server 11.1 (OES11SP1)
Domain Services for Windows
DSFW
NMAS-3.3.4.4

Situation

Password Expiration is not enforced when users are located in cn=users container

Set a password policy  either on the partition, container, or user with a password expiration.  The customer is using 30 days for password expiration.
In iManager, "Date password expires:" does not show an expiration for a users password.

The "Password Expiration Time" attribute does not exist.  When the user is in a container other than the cn=users with the same password policy assignment, the attribute is show with the appropriate value.

It dos not matter if nspmDoNotExpirePassword: FALSE or is not present on the user, the password never expires.

Status

Reported to Engineering