It's not true that this only tells you if it has expired. It tells you *when* it will expire if it's going to, which is what Ondrej said he was looking for. If you want to know, for example, if someone's password will expire within a week, that field will tell you. On 9/24/2010 9:51 AM, Aaron Hagopian wrote: > This only tells you if their password has expired but you will not > know if there are grace logins and this also doesn't tell you give you > password warnings without trying to lookup the policy. You can get > all of the password information using ldap extended operations (part > of LDAP v3 I think). > > I am using this with great success in java but not sure how much is > implemented in PHP. Maybe someone on this list or a php list may know > better. > > > > 2010/9/24 Morris, Patrick <patrick.morris at hp.com > <mailto:patrick.morris at hp.com>> > > On 9/23/2010 8:13 PM, Ondrej Ivani? wrote: > > Hi, > > > > Is there any way how to query user's password policy related > > attributes? I'm interested in password expiration date in order to > > show warning message. > > Just look for "passwordExpirationTime" on the account entry. You'll > need to ask for it specifically. > -- > 389 users mailing list > 389-users at lists.fedoraproject.org > <mailto:389-users at lists.fedoraproject.org> > https://admin.fedoraproject.org/mailman/listinfo/389-users > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.fedoraproject.org/pipermail/389-users/attachments/20100924/ffb38207/attachment-0001.html