in freeradius ldap-module it exist an Expiration attribute which I can map to an LDAP attribute, but in which format? The Documentation is not clear. I've the following LDAP attributes, which one works? sambaKickoffTime: 1580252400 krb5ValidEnd: 20200129000000Z shadowExpire: 18290 we use an OpenLDAP server thanks in advance Stefan K