It's not true that this only tells you if it has expired. It tells
you *when* it will expire if it's going to, which is what Ondrej said he
was looking for. If you want to know, for example, if someone's
password will expire within a week, that field will tell you.
On 9/24/2010 9:51 AM, Aar
This only tells you if their password has expired but you will not know if
there are grace logins and this also doesn't tell you give you password
warnings without trying to lookup the policy. You can get all of the
password information using ldap extended operations (part of LDAP v3 I
think).
I
