Searching for entries with expired ppolicy controlled passwords

Dear Folks,

I am writing Perl software to manage our OpenLDAP cluster using the
slapo.ppolicy overlay to manage password policy.  I'm hoping to get
this into production very soon.

My problem: how to efficiently search for users who have expired?

I have seen the code written by Buchan Milne at
http://staff.telkomsa.net/~bgmilne/ldap/, but he is munging with the
operational attributes directly.  The code I've written so far has
mostly avoided working with these directly; I've been using
Net::LDAP::Control::PasswordPolicy so far, and am trying to understand
how to construct a suitable filter using this control.

Can anyone point me in the right direction?
-- 
Nick Urbanik http://nicku.org 808-71011 nick.urbanik@optusnet.com.au
GPG: 7FFA CDC7 5A77 0558 DC7A 790A 16DF EC5B BB9D 2C24  ID: BB9D2C24
I disclaim, therefore I am.

• Searching for entries with expired ppolicy controlled passwords by Nick Urbanik
• Re: Searching for entries with expired ppolicy controlled passwords by Chris Ridd
• Re: Searching for entries with expired ppolicy controlled passwords by Nick Urbanik
• Re: Searching for entries with expired ppolicy controlled passwords by Buchan Milne
• Re: Searching for entries with expired ppolicy controlled passwords by Chris Ridd