I have UP policies working fine (after illogical need to have password exist
& filled first, so the user can change it on first login)

The policy was set for a password change on 120 days

Which sadly came at the time when my users are not yet due to holidays)
As I have no easy way to change the password via webform (still investigate
this option) easiest would be to change the expiry date to ie. 130 days

Of course I can change the policy to such, but that makes NO difference to
the users attributes in eDirectory

Is that working as designed?
If so, how do I control such issues via the policy?

Eventually I had to reset the time by JRB setrest utility, but I find it as
a workaround, not a solution