This only tells you if their password has expired but you will not know if there are grace logins and this also doesn't tell you give you password warnings without trying to lookup the policy. You can get all of the password information using ldap extended operations (part of LDAP v3 I think).<div>
<br></div><div>I am using this with great success in java but not sure how much is implemented in PHP. Maybe someone on this list or a php list may know better.</div><div><br></div><div><br><br><div class="gmail_quote">
2010/9/24 Morris, Patrick <span dir="ltr"><<a href="mailto:patrick.morris@hp.com">patrick.morris@hp.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="im"> On 9/23/2010 8:13 PM, Ondrej Ivanič wrote:<br>
> Hi,<br>
><br>
> Is there any way how to query user's password policy related<br>
> attributes? I'm interested in password expiration date in order to<br>
> show warning message.<br>
<br>
</div>Just look for "passwordExpirationTime" on the account entry. You'll<br>
need to ask for it specifically.<br>
<div><div></div><div class="h5">--<br>
389 users mailing list<br>
<a href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/389-users" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><br>
</div></div></blockquote></div><br></div>