Issue
After integrating Liferay with the LDAP server for users, the passwords for the users are expiring after some time and are required to be reset again. Is there any way for the passwords to never expire?
Environment
- Liferay DXP 7.4
Resolution
- While configuring Liferay with LDAP, the Liferay DXP uses its own password policy by default. This can be configured on the Control Panel’s Password Policies page.
- The local password policy comes with an option to set Password Expiration. If this option is enabled, the password will expire after a specified time. However, you may disable this option if you want your passwords to never expire.
- Additionally, there is an option to use the LDAP Password Policy, and if it is enabled (if the box 'Use LDAP Password Policy' is checked), the password policies defined by the LDAP directory can be used. (To verify, navigate to Control Panel > Instance Settings > LDAP > Under General Tab, you'll find the 'Use LDAP Password Policy' option). Once this is enabled, the Password Policies tab states that you are not using a local password policy. You must now use your LDAP directory’s mechanism for setting password policies.
- Moreover, if the LDAP password policy is enabled then all password policies that you set up in your LDAP environment will be valid for the whole instance and the Liferay password policies won't be working from then on (If this is the case, you need to configure Password Expiration over LDAP server accordingly). So you can only use one, either LDAP or Liferay password policy.