[Samba] How to get password expiration?

[Andrew Bartlett]

On Fri, 2017-02-03 at 07:44 -0700, Jeff Sadowski via samba wrote:
> This seems to work for maxPwdAge
> 
> ldapsearch -LLL -Q -s base -h ad.mydomain.tld -b
> dc=ad,dc=mydomain,dc=tld
> maxPwdAge
> 
> now I just need to query a users pwdLastSetq

Don't bother.  Let Samba do it for you, just query this operational
attribute: 

msDS-UserPasswordExpiryTimeComputed

 on the user.

I hope this helps,

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba