Re: Active Directory

[Chris F. <cf...@vi...>]

On Wed, 13 Feb 2002 10:42:20 -0600  Al Lilianstrom wrote:
 +------------------
 | I am trying to set 
 | 
 | accountExpires	1.2.840.113556.1.4.159
 | 
 | The syntax is Integer8
 | 
 | Where did these numbers came from? 1016085600 is the number of seconds
 | from the epoch for the date of March 14, 2003. If I set an account in AD
 | for a expiration date of March 14, 2003 and then dump the account to
 | ldif the value of accountExpires is 126606456000000000. 
 | 
 | Now the strange part - I just added a user with the 1016085600 value and
 | the expiration date was set properly. I'm real confused now.
 +------------------

IIRC Integer8 is a 8 octet integer with the range -2^63 to 2^63-1.  The
value you report is in that range.  I'm guessing that something broke and
stuffed an imposible value into the accountExpires attribute on that entry.
The second entry apparently did not have the attribute set so it took yours.

I'm guessing that your code is not changing the attribute value if one
already exists. You typicly have to "replace" a value if it exists and
"add" it if it does not.
--