Thanks again Michael...
If the userPassword was changed via command-line (such as via the passwd command) the attribute pwdChangedTime does not get updated. It is only updated if the userPassword attribute is updated via either the ldapmodify or, in our case, Apache Directory Studio "Edit Value".
Is that how it should work? Of did I miss something else somewhere?
Thanks in advance.
John D. Borresen (Dave) Email: john.borresen@ll.mit.edu
-----Original Message----- From: Michael Ströder [mailto:michael@stroeder.com] Sent: Wednesday, December 23, 2015 10:31 AM To: Borresen, John - 0444 - MITLL; openldap-technical@openldap.org Subject: Re: pwdChangedTime Undefined Attribute
Borresen, John - 0444 - MITLL wrote:
Now, trying to add the pwdChangedTime attribute to the jdoe UID.
This attribute is automatically added when userPassword is (re)set. No need to set it yourself. Therefore the attribute type description contains NO-USER-MODIFICATION.
Ciao, Michael.