We have a "master" server running Suse Enterprise with LDAP that controls user's access to our systems. We want to implement a 90 day expiration policy, but the issue is that most of our servers are accessed via HTTPS by end users who are not technical. They won't know how to ssh in and run "passwd" before their passwords expire.
I'm concerned that once their passwords expire, they'll need to come to me. Is there a way to force them to change their passwords once they're expired if they're logging in to our SVN or Jira via HTTPS?