Password was changed indicator on user accounts

[zer0ish]

Sorry for being annoying.

I do see in the guide section for "Extra objectClasses and attributes".
Is this how I would add a section in the webGUI to show when a user has changed their password.
I can't seem to find any info on which ones I would need to use for this use case.

I'm looking to be able to see when a user has changed their password.
I'm trying to make it so I can check they followed the email instructions to change their password, at which point when I see the password was changed, I can then grant them access to groups.

So something in this user page with a Password Last Changed: DD-MM-YYYY Time

Thanks.

[wheelybird]

Hi. To get the password modification date in the first place you would need to enable the password policy overlay on your LDAP server (https://www.zytrax.com/books/ldap/ch6/ppolicy.html).
In theory you could then set LDAP_ACCOUNT_ADDITIONAL_ATTRIBUTES="pwdChangeTime" in order to show the password, but I don't think this would work as the user manager would try to modify this attribute when creating/updating an account, and I would expect it's a read-only attribute.

The best approach would be to update the account editing code to detect if pwdChangeTime is set, and if it is then use it to show how old the password was. This is something I can consider for the next update (or code contributions are welcome as always).