Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On changing password of a user shadowLastChange value is not getting changed. Any way to change it manually ?

 objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
shadowLastChange: **14876**
shadowMax: 90
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 505

What format is this shadowLastChange ?

share|improve this question
up vote 4 down vote accepted

RFC 2307, aka nis.schema:

( nisSchema.1.5 NAME 'shadowLastChange'
  EQUALITY integerMatch

The value of the integer is not defined in the RFC but is taken from that of /etc/shadow so is the number of days since the Unix epoch.

You should be able to change it with ldapmodify(1), unless your LDAP server is configured to restrict access to this attribute and enforce it with some local policy.

share|improve this answer
yes I am able to modify with ldapmodify. but should it change automatically when we update password. – nitins Dec 22 '10 at 12:42
This is accomplished one of two ways: trusting the PAM modules on the client side to do this, or having the server update things automatically, and that's server-specific. You don't mention which server software you're running. – Phil P Jan 5 '11 at 9:58

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.