Hi,
currently we can only present a warning message which in generated
inside the MIT Kerberos library to the user if the password is about to
expire. But the developers of MIT Kerberos were so nice to add a new API
to retrieve the original timestamps
(
http://k5wiki.kerberos.org/wiki/Projects/Password_expiration_API). It
is currently available in the daily development snapshots of MIT
Kerberos and should find its way into the 1.9 release.
The attached patch checks if the new API is available and adds a
callback to read the password expiration timestamp. As mentioned on the
web page there is a small chance that this patch will not display the
time when the password expires, but the time when the account expires. I
think we can neglect this case.
bye,
Sumit