I did that. I know I have done that in the past. I see on one account the passwordExpWarned, I don't see passwordExpirationTime. We need to be able to give users warnings that the password will expire in N days. Am I looking in the wrong place, or is there a setting I haven't set? I set up a policy that is supposed to expire passwords, and warn users.<br>
<br><br><br><div class="gmail_quote">On Fri, Mar 7, 2008 at 11:17 AM, Rich Megginson <<a href="mailto:rmeggins@redhat.com">rmeggins@redhat.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">Legatus wrote:<br>
> I have tried with this search, and also using the userid that I am<br>
> requesting the information from. So "uid=me,ou=people,dc=mydc" to get<br>
> info on "uid=me,ou=people,dc=mydc"<br>
><br>
> ldapsearch -x -b 'ou=people,dc=mydc' -s sub -D 'cn=directory manager'<br>
> -w <password> "objectclass=*" attrs="passwordExpWarned<br>
> passwordExpirationTime"<br>
</div>Don't use attrs="..." Just specify them on the command line - ...<br>
"objectclass=*" passwordExpWarned passwordExpirationTime<br>
If you want all regular attributes plus the additional operational<br>
attributes, use "*" e.g.<br>
ldapsearch .... "objectclass=*" \* passwordExpWarned passwordExpirationTime<br>
ldapsearch --help<br>
...<br>
usage: ldapsearch [options] [filter [attributes...]]<br>
where:<br>
filter RFC-2254 compliant LDAP search filter<br>
attributes whitespace-separated list of attribute descriptions<br>
<br>
Note that openldap has a special attribute called "+" but this is not<br>
supported by Fedora DS.<br>
<div class="Ih2E3d">><br>
><br>
> On Fri, Mar 7, 2008 at 9:39 AM, Rich Megginson <<a href="mailto:rmeggins@redhat.com">rmeggins@redhat.com</a><br>
</div><div><div></div><div class="Wj3C7c">> <mailto:<a href="mailto:rmeggins@redhat.com">rmeggins@redhat.com</a>>> wrote:<br>
><br>
> Legatus wrote:<br>
> > I am new to the list, and I apologize if this question has been<br>
> > answered before.<br>
> ><br>
> > I haven't done much programming for LDAP, though I have been<br>
> managing<br>
> > directories for years. I am working with some developers, who a)<br>
> > aren't very imaginative, b) not very clever, and c) lazy. So I need<br>
> > to know how to get at the password information that says a password<br>
> > has expired, is about to expire, et. al. I have tried to query<br>
> for the<br>
> > attributes using ldapsearch that seem to be what I want, like<br>
> > passwordexpirationtime, but I get nothing back.<br>
> Can you post your exact ldapsearch command line? Note that<br>
> passwordexpirationtime and other password attributes in user<br>
> entries are<br>
> operational attributes - this means they are not retrieved by default<br>
> with an LDAP search but must be explicitly listed in the list of<br>
> attributes to retrieve.<br>
> > They all figure I should know the magic incantation, since I<br>
> know how<br>
> > to make the directory work, and usually that would be the case. This<br>
> > time I am stuck. Anyone solved this problem. I am running FDS 1.0.2,<br>
> > and 1.0.4. I get the same result in both. Any help would be great.<br>
> ><br>
> ------------------------------------------------------------------------<br>
> ><br>
> > --<br>
> > Fedora-directory-users mailing list<br>
> > <a href="mailto:Fedora-directory-users@redhat.com">Fedora-directory-users@redhat.com</a><br>
</div></div>> <mailto:<a href="mailto:Fedora-directory-users@redhat.com">Fedora-directory-users@redhat.com</a>><br>
<div class="Ih2E3d">> > <a href="https://www.redhat.com/mailman/listinfo/fedora-directory-users" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-directory-users</a><br>
> ><br>
><br>
><br>
> --<br>
> Fedora-directory-users mailing list<br>
> <a href="mailto:Fedora-directory-users@redhat.com">Fedora-directory-users@redhat.com</a><br>
</div>> <mailto:<a href="mailto:Fedora-directory-users@redhat.com">Fedora-directory-users@redhat.com</a>><br>
<div><div></div><div class="Wj3C7c">> <a href="https://www.redhat.com/mailman/listinfo/fedora-directory-users" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-directory-users</a><br>
><br>
><br>
><br>
> ------------------------------------------------------------------------<br>
><br>
> --<br>
> Fedora-directory-users mailing list<br>
> <a href="mailto:Fedora-directory-users@redhat.com">Fedora-directory-users@redhat.com</a><br>
> <a href="https://www.redhat.com/mailman/listinfo/fedora-directory-users" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-directory-users</a><br>
><br>
<br>
</div></div><br>--<br>
Fedora-directory-users mailing list<br>
<a href="mailto:Fedora-directory-users@redhat.com">Fedora-directory-users@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/fedora-directory-users" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-directory-users</a><br>
<br></blockquote></div><br>