On 7/11/22 10:38, Francesco Malvezzi wrote:
I am using some pwdChangedTime range queries to warn users about
password expiration.
An example filter might be:
(&(pwdChangedTime<=20211019000000Z)(pwdChangedTime>=20211018000001Z)(pwdPolicySubentry=cn=default270g,ou=policies,ou=people,dc=example,dc=edu))
since in-place upgrade to OpenLDAP-2.6.2 these queries return no entries.
Are you 100% sure that there should be an entry returned with a
pwdChangedTime value in this 24h interval?
If I remove either comparison condition:
(&(pwdChangedTime>=20211018000001Z)(pwdPolicySubentry=cn=default270g,ou=policies,ou=people,dc=example,dc=edu))
(&(pwdChangedTime<=20211019000000Z)(pwdPolicySubentry=cn=default270g,ou=policies,ou=people,dc=example,dc=edu))
they both work.
Whatever "it works" really means. Without seeing example entries and
their pwdChangedTime values it's impossible to say anything meaningful -
except the usual "it works for me".
Ciao, Michael.
