On Dec 21, 2005, at 9:08 AM, Jim Summers wrote > Also when doing an ldapsearch and binding as an admin user I can > not see the entries for the passwordXXXXXXX fields. Is there a > certain ldapsearch switch to see those? Possibly an ACI missing on > my part? This is by design. The intent is that certain fields should not be returned unless they are explicitly specified. If you do your search like this: ldapsearch -D admin_user_dn -w admin_user_pw -b base filter * passwordexpirationtime You should get the normal fields plus the passwordexpirationtime. -jeff -- Jeff Medcalf jeff at caerdroia.org