Description of problem:
The attribute shadowWarning is not returned if the passwordWarning value is
lower than 86400 seconds (1 day).
Version-Release number of selected component (if applicable):
# rpm -qa | grep 389-ds-base-
389-ds-base-debuginfo-1.3.7.5-18.el7.x86_64
389-ds-base-1.3.7.5-13.el7.x86_64
389-ds-base-libs-1.3.7.5-13.el7.x86_64
#
How reproducible:
Always.
Steps to Reproduce:
1. Set the passwordWarning value to 86400 or higher:
# ldapsearch -xLLL  -p <PORT> -h <HOST> -b "cn=config" -D"cn=Directory Manager"
-W -sbase passwordWarning
Enter LDAP Password:
dn: cn=config
passwordWarning: 86400
#
A search will return the shadowWarning attribute:
# ldapsearch -xLLL  -p <PORT> -h <HOST> -b "ou=People,o=Test" -D"cn=Directory
Manager" -W  "uid=tmorris" shadowWarning
Enter LDAP Password:
dn: uid=tmorris,ou=People,o=Test
shadowWarning: 1
#
2. Set the passwordWarning value lower than 86400:
#  ldapmodify -x -D"cn=Directory Manager" -W -p <PORT> -h <HOST>
Enter LDAP Password:
dn: cn=config
changetype: modify
replace: passwordWarning
passwordWarning: 86399
modifying entry "cn=config"
#
No value for is returned for shadowWarning:
# ldapsearch -xLLL  -p <PORT> -h <HOST> -b "ou=People,o=Test" -D"cn=Directory
Manager" -W  "uid=tmorris" shadowWarning
Enter LDAP Password:
dn: uid=tmorris,ou=People,o=Test
#
Actual results:
shadowWarning is only generated if the passwordWarning value is higher or equal
to 1 day.
Expected results:
shadowWarning should be returned as long as passwordWarning is defined.
Additional info: