Hello Mark,
for some reason I do not see expiration date for my user. What I did:
via the 389 GUI I set password expiration for my user. I did not
change the current password though
Do I need to change the password after or it should start the count to
the reset date automatically?
Regards,
On Thu, Nov 3, 2016 at 2:21 PM, Mark Reynolds <mareynol(a)redhat.com> wrote:
> Todor,
>
> All you need to do is request the passwordexpirationtime attribute from the
> user entry:
>
> For example:
>
> # ldapsearch -D "cn=directory manager" -W -b "dc=domain,dc=com"
uid=USERID
> passwordexpirationtime
>
> Regards,
> Mark
>
> On 11/03/2016 03:10 AM, Todor Petkov wrote:
>
> Hello,
>
> I am trying to get the user password expiration date, so I can write a
> script to send warning email before this. I am running the following:
> ldapsearch -v -LLLx -h localhost -b
>
'cn="cn=nsPwPolicyEntry,uid=user,ou=People,dc=domain,dc=com",cn=nsPwPolicyContainer,ou=People,dc=domain,dc=com'
> "(objectclass=ldapsubentry)"
>
> But I don't see such attribute in the results. Can you give me a hint
> what's the ldap query? My versions are:
>
> 389-admin-console-1.1.8-1.el6.noarch
> 389-ds-1.2.2-1.el6.noarch
> 389-adminutil-1.1.19-1.el6.x86_64
> 389-ds-base-libs-1.2.11.15-75.el6_8.x86_64
> 389-ds-base-1.2.11.15-75.el6_8.x86_64
> 389-ds-console-1.2.6-1.el6.noarch
> 389-admin-console-doc-1.1.8-1.el6.noarch
> 389-admin-1.1.35-1.el6.x86_64
> 389-console-1.1.7-1.el6.noarch
> 389-ds-console-doc-1.2.6-1.
> el6.noarch
> 389-dsgw-1.1.11-1.el6.x86_64
>
>
> Thanks in advance,
> _______________________________________________
> 389-users mailing list -- 389-users(a)lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>
>
>
> _______________________________________________
> 389-users mailing list -- 389-users(a)lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>