Expired password

[Scott Balneaves]

On Fri, Sep 18, 2009 at 01:50:45PM +0200, ghido wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi all, i use edubuntu with ldap backend for authenticate my users.
> There is a possibility to view the password expire warning in ldm?
> i used this notification in kdm and gdm automatically before to use
> ltsp on edubuntu.

Not currently, no, and I'm not sure if ever :(  Here's why:

Because LDM uses ssh to log in, you don't actually log into the server until
you establish an ssh session to it.  However, LDM's already collected the
userid and password by this time, and if the login succeeds, then... you're in.

Really, what LDM should be is use some kind of remote PAM authentication,
obtain a kerberos ticket, and then do the ssh login to the server with *that*.
That would allow the LDM login screen to actually behave like a proper PAM
application, which would mean it could get proper expiry information, etc.

However, this increases both LDM's and the server's setup complexity by an
order of magnatude.

Cheers,
Scott

-- 
Scott L. Balneaves | Kindness is a language which the deaf can hear
Systems Department | and the blind can read.
Legal Aid Manitoba |     -- Mark Twain