Ok, maybe I haven't understood your idea then. Mine was: check a user's password expiry if (and only if) - the account requires a password - the password can expire - the account isn't disabled And those criteria are met if the userAccountControl value is "512". Oh wait: as you are checking bits, you have the SmartCard case covered as well, right? Ole On 14.02.2017 13:29, Rowland Penny via samba wrote:> On Tue, 14 Feb 2017 13:07:17 +0100 > Ole Traupe via samba <samba at lists.samba.org> wrote: > >> Yes, but if the password never expires, I don't need to include it in >> the check the script performs. >> > Yes and doing it my way ensures the user will get excluded. > > Rowland >
Rowland Penny
2017-Feb-14 15:12 UTC
[Samba] Users list and the date the password will expire
On Tue, 14 Feb 2017 14:50:59 +0100 Ole Traupe via samba <samba at lists.samba.org> wrote:> > Oh wait: as you are checking bits, you have the SmartCard case > covered as well, right? >It checks for 'ANY' disabled users. Rowland
Thanks, that was what I was trying to say (you cover all cases). My idea was that you don't need to process any users whose password won't expire or who don't have one in the first place. Depending on your situation that might actually save some time. However, I think your solution is more complete. Ole On 14.02.2017 16:12, Rowland Penny via samba wrote:> On Tue, 14 Feb 2017 14:50:59 +0100 > Ole Traupe via samba <samba at lists.samba.org> wrote: > >> Oh wait: as you are checking bits, you have the SmartCard case >> covered as well, right? >> > It checks for 'ANY' disabled users. > > Rowland > >