> Source: [sk143672](https://support.checkpoint.com/results/sk/sk143672)

# sk143672 - "User account expired" error on LDAP user authentication failure

| Property | Value |
|----------|-------|
| Solution ID | sk143672 |
| Date Created | 2018-12-31 |
| Last Modified | 2020-11-18 |
| Technical Level | Advanced |
| Products | Security Gateway, Endpoint Security |
| Versions | R82.10, R82, R81.20, Cloud, E89.X, E88.X |
| OS | Gaia |

## Symptoms

- * LDAP user fails to authenticate for RA VPN, receiving the "`User account expired`" error, although the user account has not expired.  

* When connecting with the user, the error message might show "`User is expired`" although neither the user nor the certificate are about to expire.
* The `vpnd.elg` file shows:

  ```
  
  [vpnd PID ...]@Host[DATE TIME][CPLDAPSDK] ldap_get_values
  [vpnd PID ...]@Host[DATE TIME][CPLDAPCL] Creating Fw Attribute expiration_date From Ldap Attribute accountExpires
  [vpnd PID ...]@Host[DATE TIME][CPLDAPCL] The date string to check: 0
  [vpnd PID ...]@Host[DATE TIME][CPLDAPCL] Attribute check failed
  [vpnd PID ...]@Host[DATE TIME][CPLDAPCL] Check Method Failed For Fw Attribute expiration_date
  ```

## Cause

There are two different values that mean "*Account never expires*" on Microsoft Active Directory.

* 1. 0x7FFFFFFFFFFFFFFF (9223372036854775807)
* 2. 0
If the Gateway receives the second value, it will be ignored and the value from the user template on SmartConsole will be taken. If the expiration date on the template has passed, the user will get the error.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content