RE: shadowAccount

["Howard Chu" <hyc@symas.com>]

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Schabel Markus

> Hi!
> 
> I'm currently working on converting the smbldap-tools to use the 
> shadowAccount-objectClass.
> 
> I'm not sure about the mapping between /etc/shadow and shadowAccount.
> 
> Is "Days after password expires that account is disabled" the 
> shadowExpire attribute?
> Is "Days since Jan 1, 1970 that account is disabled" the shadowInactive 
> attribute?
> Is "A reserved field" the shadowFlag attribute?

  struct spwd {
	char *sp_namp; /* user login name */		uid
	char *sp_pwdp; /* encrypted password */		userpassword
	long sp_lstchg; /* last password change */	shadowLastChange
	int  sp_min; /* days until change allowed. */	shadowMin
	int  sp_max; /* days before change required */	shadowMax
	int  sp_warn; /* days warning for expiration */	shadowWarning
	int  sp_inact; /* days before account inactive */	shadowInactive
	int  sp_expire; /* date when account expires */	shadowExpire
	int  sp_flag; /* reserved for future use */	shadowFlag
  }

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support