[Samba] Some hint reading password expiration data...

[Andrew Bartlett]

On Thu, 2017-10-26 at 19:36 +0100, Rowland Penny via samba wrote:
> On Fri, 27 Oct 2017 07:17:56 +1300
> Andrew Bartlett <abartlet at samba.org> wrote:
> 
> > On Thu, 2017-10-26 at 09:26 +0100, Rowland Penny via samba wrote:
> > > On Thu, 26 Oct 2017 13:25:00 +1300
> > > Andrew Bartlett <abartlet at samba.org> wrote:
> > > 
> > > > On Tue, 2017-10-24 at 18:13 +0100, Rowland Penny via samba wrote:
> > > > > 
> > > > > Good question, at the moment it is 'dynamic', but there is the
> > > > > 'msDS-UserPasswordExpiryTimeComputed' attribute but it doesn't
> > > > > seem to
> > > > > be used yet Samba.
> > > > 
> > > > We do implement this and use it internally, but I can't find any
> > > > unit tests specifically for it.  Ouch! :-)
> > > > 
> > > > Andrew Bartlett
> > > > 
> > > 
> > > I know it is in the schema, but is there any code to use it ?
> > 
> > Yes.  
> > 
> > Andrew Bartlett
> > 
> 
> Go on, I give in, where ? and how does a user use it.

It is an operational attribute.  simply add 

msDS-UserPasswordExpiryTimeComputed

to the list of attributes requested when searching for the user. 

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba