samba - May 2019 - Diffrent date codes from pwdLastSet and Password must change Time

Hi,
i have little strange behaviour

I have a bash script running to notify users about the expire of there 
password

I query the users with ldapsearch and use pwdLastSet, but this search is 
diffrent to "Password must change Time" with rpcclient i now found
out.

Password must change Time is +1 Day vs pwdLastSet.
can sombody explain this?


pwdLastSet: 131945210982711300
https://www.epochconverter.com/ldap
Epoch/Unix time: 1550047498
GMT: Wednesday, 13. February 2019 08:44:58
Your time zone: Mittwoch, 13. Februar 2019 09:44:58 GMT+01:00

Password must change Time:      Di, 14 Mai 2019 10:44:58 CEST


Smba 4.10.2 AD/DC
Sever time with NTP set Mo 13. Mai 10:02:13 CEST 2019





Mit freundlichen Grüßen,
René Fuchs


-- 
***********************************************
aixtema GmbH
René Fuchs
Philipsstr. 8, 52068 Aachen, Germany
Tel.: +49 241 70515-1323, Fax: +49 241 70515-15
mailto:admins at aixtema.de

WWW: http://www.aixtema.de
Shop: http://shop.aixtema.de

Geschaeftsfuehrer: Oliver Rossbruch
HRB 8201, Amtsgericht Aachen
USt.-Id-Nr. DE 210 906 744
St.-Nr. 201/5942/3737, Finanzamt Aachen Stadt
***********************************************

On Mon, 13 May 2019 10:04:40 +0200
admins aixtema via samba <samba at lists.samba.org> wrote:
> Hi,
> i have little strange behaviour
> 
> I have a bash script running to notify users about the expire of
> there password
> 
> I query the users with ldapsearch and use pwdLastSet, but this search
> is diffrent to "Password must change Time" with rpcclient i now
found
> out.
> 
> Password must change Time is +1 Day vs pwdLastSet.
> can sombody explain this?
> 
> 
> pwdLastSet: 131945210982711300
> https://www.epochconverter.com/ldap
> Epoch/Unix time: 1550047498
> GMT: Wednesday, 13. February 2019 08:44:58
> Your time zone: Mittwoch, 13. Februar 2019 09:44:58 GMT+01:00
> 
> Password must change Time:      Di, 14 Mai 2019 10:44:58 CEST
> 
> 
> Smba 4.10.2 AD/DC
> Sever time with NTP set Mo 13. Mai 10:02:13 CEST 2019
> 
I don't actually see anything wrong with that (providing your maximum
password age is 90 days)

'pwdLastSet' is exactly that, it is when the password was last set,
this is used with 'maxPwdAge' to calculate when the users password will
expire.

Rowland