Try that again.
Main Topics
Browse All TopicsAnyone know of a utility or a way in iManager to display the date of a user's last password change? The OS certainly tracks it since you force a password change in XX days.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I'm not aware of an imanager solution, but you should be able to view the attribute "pwdchangedtime" with nlist:
NLIST user show pwdchangedtime
(add /r /c /s to search continuous from [root] through all subcontainers)
Otoh, while that attribute is present in our production tree, it may very well be that it was added by Nmas or Identity manager. If the pwdchanged attribute is not present you could find the password change time by substracting "password expiration time" from "password expiration interval"
in iManager you can build your own custom plugins with Plugin studio, where you can accomplish above tasks:
http://www.novell.com/cool
And of course there are the JRB utilities: PWDEXP
http://www.jrbsoftware.com
Hope that helps...
You can also extract pwdChangedTime using Console one, if you click on the "other" tab, and "show readonly" you will see it there.
The easist way to extract it is via LDAP, do a ldap search, and specify which attributes you want. Doing this in ICE you would do something like:
ice -S LDAP -s server -p 389 -d cn=admin,o=org -w password -b o=org -a dn,cn,pwdChangedTime -D DELIM -t dn,cn,pwdChangedTime -f output.csv
This would create an output file which had all users dn & cn & the last time they changed their password in YYYYMMDDHHMMSS .
Business Accounts
Answer for Membership
by: henryrohlfsPosted on 2009-09-29 at 13:02:02ID: 25452840
No response yet, so I'm Increasing the points.