Query password expiration FreeIPA or RedHat IDM

ldapsearch -x -b cn=users,cn=accounts,dc=example,dc=com '(&(!(nsAccountLock=TRUE))(krbPasswordExpiration>=${d}))' krbPrincipalName krbPasswordExpiration -D 'uid=admin,cn=users,cn=accounts,dc=example,dc=com' -w Passw0rd!

References

query_old_password_ipa.txt · Last modified: 2018/08/20 18:27
Public Domain Except where otherwise noted, content on this wiki is licensed under the following license: Public Domain