I'm trying to get when a user account was un-disabled. I'm not getting anything right in the filter syntax to only return users with nsaccountlock modifytimestamp between search values.
It seems I can see different modifytimestamp values for different components of a user account if they are changed at different times. Example: change employeenumber, wait 10 minutes and disable the account. Ldapsearch for uid employeenumber nssaccountlock modifytimestamp will show two modifytimestamp entries, one each for employeenumber and nsaccountlock. I am trying to explicitly filter out users who's accounts have been re-enabled in the past 30 days. Ideas are greatly appreciated!!
-- _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
