ldapsearch -x -b 'ou=people,dc=mydc' -s sub -D 'cn=directory manager' -w <password> "objectclass=*" attrs="passwordExpWarned passwordExpirationTime"
On Fri, Mar 7, 2008 at 9:39 AM, Rich Megginson <rmeggins@xxxxxxxxxx> wrote:
Legatus wrote:Can you post your exact ldapsearch command line? Note that
> I am new to the list, and I apologize if this question has been
> answered before.
>
> I haven't done much programming for LDAP, though I have been managing
> directories for years. I am working with some developers, who a)
> aren't very imaginative, b) not very clever, and c) lazy. So I need
> to know how to get at the password information that says a password
> has expired, is about to expire, et. al. I have tried to query for the
> attributes using ldapsearch that seem to be what I want, like
> passwordexpirationtime, but I get nothing back.
passwordexpirationtime and other password attributes in user entries are
operational attributes - this means they are not retrieved by default
with an LDAP search but must be explicitly listed in the list of
attributes to retrieve.
> They all figure I should know the magic incantation, since I know how> ------------------------------------------------------------------------
> to make the directory work, and usually that would be the case. This
> time I am stuck. Anyone solved this problem. I am running FDS 1.0.2,
> and 1.0.4. I get the same result in both. Any help would be great.
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users