activeldap/activeldap — Issue #32: Disabled / Active attribute for a user object and time conversion issue?
Author: konung
Created: 2012-01-20 23:31:20+00:00
State: open

Hello.

This is more of a questions then issue, but I can't find answer anywhere else. I should also mention that I'm working against Active Directory running on Windows 2003

1) Which attribute should I check to see if the account is disabled or enabled?
I've seen people recommending to use userAccountControl or pwd_account_locked_time - but the first attribute returns unexpected values and the second doesn't work for me.

2) What format are all the time attributes in? How can I convert them to proper time?
I thought they were just epoch - but apparently they are not. any idea?

Thank you