[Samba] About password expiry

[Andrew Bartlett]

On Thu, 2015-11-26 at 00:40 -0500, Amaury Viera Hernández wrote:
> Hi every one:
> I'm using samba4 as domain controller and a I want to check every 1
> hour in my mail server the password expiration for every user in the
> domain. I need to kow what is the attribute used in samba4. 
> Using ldbsearch i see badPasswordTime and accountExpires, but in the
> microsoft documentation said that accountExpires is used for
> represent the date when the account expires. Can i use this and send
> the email to the users telling that they need to change their
> password?
> About badPasswordTime said that represent The last time and date that
> an attempt to log on to this account was made with a password that is
> not valid.
> 
> I'm confuse. Could you help me to know which of this attributes I
> need for advise to the users about their password expiration?
> Thanks in advance. Amaury.

Try asking for the operational (so generated, and only given if
requested) attribute "msDS-UserPasswordExpiryTimeComputed" in current
versions.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba