Password expiring warning with AD

[joller lee]

On Wed, Feb 17, 2016 at 1:48 AM, Douglas E Engert <deengert at gmail.com>
wrote:

> Unless I missed something, could the AD attribute
> msDS-UserPasswordExpiryTimeComputed be used?
>
> Its in AD 2008 and above:
>
> https://msdn.microsoft.com/en-us/library/cc223410.aspx/
>
> https://msdn.microsoft.com/en-us/library/windows/desktop/ms677839(v=vs.85).aspx
>
> It lest AD do the calculation. So the warning could be produced if the
> attribute
> is less then some selected time like a week.


I've tried it after reading your post.
And, yes, it works.
It eliminates the duplicate configuration of password age.
But still the same parsing process is required.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160217/cba60686/attachment.html>