Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

On changing password of a user shadowLastChange value is not getting changed. Any way to change it manually ?

 objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
shadowLastChange: **14876**
shadowMax: 90
shadowWarning: 7
loginShell: /bin/bash
uidNumber: 505

What format is this shadowLastChange ?

share|improve this question

1 Answer 1

up vote 4 down vote accepted

RFC 2307, aka nis.schema:

( nisSchema.1.5 NAME 'shadowLastChange'
  EQUALITY integerMatch
  SYNTAX 'INTEGER' SINGLE-VALUE )

The value of the integer is not defined in the RFC but is taken from that of /etc/shadow so is the number of days since the Unix epoch.

You should be able to change it with ldapmodify(1), unless your LDAP server is configured to restrict access to this attribute and enforce it with some local policy.

share|improve this answer
    
yes I am able to modify with ldapmodify. but should it change automatically when we update password. –  nitins Dec 22 '10 at 12:42
    
This is accomplished one of two ways: trusting the PAM modules on the client side to do this, or having the server update things automatically, and that's server-specific. You don't mention which server software you're running. –  Phil P Jan 5 '11 at 9:58

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.