We will require a list of users under ou=xyz whose passwords are going to expire in next 2 weeks.

Can you please let us know how can we pull via  linux cli & open  'ldap browser' e.g apache DS.