Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to store account creation and expiry dates in our existing ldap. None of the standard existing schemas seem to quite fit the bill, not even ppolicy or samba.

The answer I've come across so far is: "use a custom schema".

Fine, but I can't seem to find an existing custom schema to hold account creation and expiry dates. Shurely someone has already had to store this kind of info in their ldap and has therefore used (maybe even created) such a schema, no? If I can't find one, does this mean I will really have to write my own custom schema and all? Seems like I'd be inventing the wheel again frankly, I'm sure I've missed something but I just can't find an existing schema for my needs (or at least one from which I could take existing attributes and objectClasses and plonk them in my schema...).

Am I missing something obvious here?


share|improve this question

While there may be no standard schema universally used, many LDAP servers come with existing attributes like creationTimestamp and some kind of Account Expiration Time.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.