Skip to content

Instantly share code, notes, and snippets.

@SilverJan

SilverJan/bash_get_ad_pw_expiry_date.sh

Last active March 15, 2021 07:21
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save SilverJan/0f4f757a64d620ad7a3256684ab226ee to your computer and use it in GitHub Desktop.
Save SilverJan/0f4f757a64d620ad7a3256684ab226ee to your computer and use it in GitHub Desktop.
Download ZIP
One-liner to get the AD password expiry date for a user (in UTC)
Raw
bash_get_ad_pw_expiry_date.sh
# input vars
AD_USER=abc1de
# Windows ticks are in 100ns
WINDOWS_TICK=10000000
# seconds to be added to make Windows file time Unix file time
SEC_TO_UNIX_EPOCH=11644473600
# 180 days (AD setting via maxPwdAge) in seconds
PWD_MAX_AGE_SECONDS=15552000
# AD server
AD_SERVER="x.xx.com"
# DC server
DCS="DC=x,DC=xx,DC=com"
# calculate
date -d @$(($(ldapsearch -h $AD_SERVER -b $DCS "(samaccountname=$AD_USER)" -Q | grep -i pwdLastSet | awk -F' ' '{print $2}') / $WINDOWS_TICK - $SEC_TO_UNIX_EPOCH + $PWD_MAX_AGE_SECONDS))
Sat 17 Apr 2021 11:31:44 AM +08
# formular from https://stackoverflow.com/questions/6161776/convert-windows-filetime-to-second-in-unix-linux
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment