[Samba] Users list and the date the password will expire

[Rowland Penny]

On Sun, 26 Mar 2017 00:16:13 -0400
Mark Foley via samba <samba at lists.samba.org> wrote:

> 
> ldbsearch --url="/var/lib/samba/private/sam.ldb" -b
> "DC=hprs,DC=local" -s sub
> "(&(objectCategory=person)(objectClass=user)(sAMAccountName=mark))"
> msDS-UserPasswordExpiryTimeComputed
> 
> returns 0 records. Certainly because the --url refers the the
> PRIVATE_DIR on the domain server, not the domain member. using
> mail:/var/lib/... or mail.hprs.local:/var/lib/... and a few other
> variations I could think of did not work.
> 
> So, how do I get msDS-UserPasswordExpiryTimeComputed from a domain
> member?
> 

Try this:

ldbsearch --url=ldap://A_DC_HOSTNAME -b "DC=hprs,DC=local" -s sub
"(&(sAMAccountType=805306368)(sAMAccountName=mark))"
msDS-UserPasswordExpiryTimeComputed

Replace 'A_DC_HOSTNAME' with your DCs short hostname.

Rowland