On 7/11/22 10:38, Francesco Malvezzi wrote:
I am using some pwdChangedTime range queries to warn users about password expiration.
An example filter might be:
(&(pwdChangedTime<=20211019000000Z)(pwdChangedTime>=20211018000001Z)(pwdPolicySubentry=cn=default270g,ou=policies,ou=people,dc=example,dc=edu))
since in-place upgrade to OpenLDAP-2.6.2 these queries return no entries.
Are you 100% sure that there should be an entry returned with a pwdChangedTime value in this 24h interval?
If I remove either comparison condition: (&(pwdChangedTime>=20211018000001Z)(pwdPolicySubentry=cn=default270g,ou=policies,ou=people,dc=example,dc=edu)) (&(pwdChangedTime<=20211019000000Z)(pwdPolicySubentry=cn=default270g,ou=policies,ou=people,dc=example,dc=edu)) they both work.
Whatever "it works" really means. Without seeing example entries and their pwdChangedTime values it's impossible to say anything meaningful - except the usual "it works for me".
Ciao, Michael.