Hie


We are in the process of migrating from Sun Directory Server to 389 Directory Server. In the past we used a pwdChangedTime operational attribute for one of our audit reports.  Is there an equivalent attribute recorded by 389?

 


There is no pwdChangedTime attribute in 389-ds, You can use passwordexpirationtime if you want to audit expiration date of passwords.

# ldapsearch -x -D "cn=Directory Manager" -w password -b "dc=example,dc=com" passwordexpirationtime

Regards
Arpit Tolani