[389-users] Questions about password expiration

Hello,

before enabling password expiration, I would like to ask some questions:

1) When I enable it, the counter will start and the users will have X
days before the password expires, is this correct? It will not block
some user, that has never changed his password since created an year ago.

2) Is there a script that sends email notification to the user that the
password will expire in X days? I googled it, but so far only scripts
for Active Directory show up.

3) Can an user be excluded from password expiration?

The server in question is Centos6, with 389 versions:
389-ds-base-1.2.11.15-72.el6_7.x86_64
389-admin-console-1.1.8-1.el6.noarch
389-ds-1.2.2-1.el6.noarch
389-adminutil-1.1.19-1.el6.x86_64
389-ds-console-1.2.6-1.el6.noarch
389-admin-console-doc-1.1.8-1.el6.noarch
389-admin-1.1.35-1.el6.x86_64
389-ds-base-libs-1.2.11.15-72.el6_7.x86_64
389-console-1.1.7-1.el6.noarch
389-ds-console-doc-1.2.6-1.el6.noarch
389-dsgw-1.1.11-1.el6.x86_64

Regards,
--
389-users mailing list
389-users@lists.fedoraproject.org
http://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org