admins aixtema
2019-May-13 08:04 UTC
[Samba] Diffrent date codes from pwdLastSet and Password must change Time
Hi, i have little strange behaviour I have a bash script running to notify users about the expire of there password I query the users with ldapsearch and use pwdLastSet, but this search is diffrent to "Password must change Time" with rpcclient i now found out. Password must change Time is +1 Day vs pwdLastSet. can sombody explain this? pwdLastSet: 131945210982711300 https://www.epochconverter.com/ldap Epoch/Unix time: 1550047498 GMT: Wednesday, 13. February 2019 08:44:58 Your time zone: Mittwoch, 13. Februar 2019 09:44:58 GMT+01:00 Password must change Time: Di, 14 Mai 2019 10:44:58 CEST Smba 4.10.2 AD/DC Sever time with NTP set Mo 13. Mai 10:02:13 CEST 2019 Mit freundlichen Grüßen, René Fuchs -- *********************************************** aixtema GmbH René Fuchs Philipsstr. 8, 52068 Aachen, Germany Tel.: +49 241 70515-1323, Fax: +49 241 70515-15 mailto:admins at aixtema.de WWW: http://www.aixtema.de Shop: http://shop.aixtema.de Geschaeftsfuehrer: Oliver Rossbruch HRB 8201, Amtsgericht Aachen USt.-Id-Nr. DE 210 906 744 St.-Nr. 201/5942/3737, Finanzamt Aachen Stadt ***********************************************
Rowland Penny
2019-May-13 08:52 UTC
[Samba] Diffrent date codes from pwdLastSet and Password must change Time
On Mon, 13 May 2019 10:04:40 +0200 admins aixtema via samba <samba at lists.samba.org> wrote:> Hi, > i have little strange behaviour > > I have a bash script running to notify users about the expire of > there password > > I query the users with ldapsearch and use pwdLastSet, but this search > is diffrent to "Password must change Time" with rpcclient i now found > out. > > Password must change Time is +1 Day vs pwdLastSet. > can sombody explain this? > > > pwdLastSet: 131945210982711300 > https://www.epochconverter.com/ldap > Epoch/Unix time: 1550047498 > GMT: Wednesday, 13. February 2019 08:44:58 > Your time zone: Mittwoch, 13. Februar 2019 09:44:58 GMT+01:00 > > Password must change Time: Di, 14 Mai 2019 10:44:58 CEST > > > Smba 4.10.2 AD/DC > Sever time with NTP set Mo 13. Mai 10:02:13 CEST 2019 >I don't actually see anything wrong with that (providing your maximum password age is 90 days) 'pwdLastSet' is exactly that, it is when the password was last set, this is used with 'maxPwdAge' to calculate when the users password will expire. Rowland