Fedora directory users - Jan 2006 - Couple of questions on ldapsearch queries

I''m sure that you guys will know how to run these queries against my
directory servers (pardon the newbie questions), but can you tell me how
to:

1. Check last time passwords were changed (similar functionality to
chage)
2. check when passwords are due to expire (similar functionality to
chage)
3. Return list of users who have access to a specific server (I''m using
the host attribute in order to restrict access to servers) i.e. show
list of users who have access to serverA

Thanks very much for your help.

Aaron

www.preferredcare.org
"An Outstanding Member Experience," Preferred Care HMO Plans -- J. D.
Power and Associates

Confidentiality Notice:
The information contained in this electronic message is intended for the
exclusive use of the individual or entity named above and may contain privileged
or confidential information.  If the reader of this message is not the intended
recipient or the employee or agent responsible to deliver it to the intended
recipient, you are hereby notified that dissemination, distribution or copying
of this information is prohibited.  If you have received this communication in
error, please notify the sender immediately by telephone and destroy the copies
you received.

Bliss, Aaron wrote:
>I''m sure that you guys will know how to run these queries against
my
>directory servers (pardon the newbie questions), but can you tell me how
>to:
>
>1. Check last time passwords were changed (similar functionality to
>chage)
>  
>
We don''t store that information in easy client readable form, and not
at
all if you''re not using replication.
>2. check when passwords are due to expire (similar functionality to
>chage)
>  
>
The operational attribute passwordExpirationTime
>3. Return list of users who have access to a specific server (I''m
using
>the host attribute in order to restrict access to servers) i.e. show
>list of users who have access to serverA
>  
>
ldapsearch .... (host=serverA) uid

You will need to index the host attribute for equality if you have many 
entries or you may find your performance suffers.
>Thanks very much for your help.
>
>Aaron
>
>www.preferredcare.org
>"An Outstanding Member Experience," Preferred Care HMO Plans -- J.
D. Power and Associates
>
>Confidentiality Notice:
>The information contained in this electronic message is intended for the
exclusive use of the individual or entity named above and may contain privileged
or confidential information.  If the reader of this message is not the intended
recipient or the employee or agent responsible to deliver it to the intended
recipient, you are hereby notified that dissemination, distribution or copying
of this information is prohibited.  If you have received this communication in
error, please notify the sender immediately by telephone and destroy the copies
you received.
>
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users@redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>