>
> > Am I missing something? Anyone else have a cleaner way
> > of determining that it's a grace period login?
> I think it should return the pwexpired control. But according to this
> http://tools.ietf.org/html/draft-behera-ldap-password-policy-10#section-7.4
> you should be able to determine h
I am having an issue in regards to handling expiring passwords during the
grace period. I also filed a bug because I find the behavior to not be as
expected (https://bugzilla.redhat.com/show_bug.cgi?id=576303). But to
summarize my bug report, in my code that checks a user's credentials
(username
