Overview#

PwdExpireWarning attribute specifies the maximum number of seconds before a password is due to expire that expiration warning messages will be returned to an authenticating user.

If this attribute is not present, or if the value is 0 no warnings will be returned. If not 0, the value must be smaller than the value of the pwdMaxAge attribute.

LDAP Attribute Definition#

The PwdExpireWarning AttributeTypes is defined as:

• OID of 1.3.6.1.4.1.42.2.27.8.1.7
• NAME: PwdExpireWarning
• DESC: specifies the maximum number of seconds before a password is due to expire that expiration warning messages will be returned to an authenticating user.
• EQUALITY: integerMatch
• ORDERING:
• SYNTAX: 1.3.6.1.4.1.1466.115.121.1.27
• SINGLE-VALUE
• USAGE
• Used as MUST in:
• Used MAY in:
  • pwdPolicy

More Information#

There might be more information for this subject on one of the following:

• Draft-behera-ldap-password-policy
• Password Expiration Warning
• PwdPolicy