Re: PPolicy overlay and hidden user attributes.

[Howard Chu <hyc@symas.com>]

dennis@demarco.com wrote:

> I'm playing with the password policy overlay and it seems to be 
> working, but I can't see any of the user attributes that the policy 
> sets on an user object in my ldapbrowser:
>
> pwdChangedTime, pwdAccountLockedTime, pwdExpirationWarned,
> pwdFailureTime, pwdHistory, pwdGraceUseTime, pwdReset,
> pwdPolicySubEntry

As the documentation states, and the schema definitions show, these are 
operational attributes, not user attributes. Operational attributes must 
be requested by name, they are not returned by default.

--
 -- Howard Chu
 Chief Architect, Symas Corp.       Director, Highland Sun
 http://www.symas.com               http://highlandsun.com/hyc
 Symas: Premier OpenSource Development and Support