I use freeradius with ldap for eap-peap in my network. In ldap module I check user by means of:

filter = "(&(uid=%{User-Name})(o=COMPANY))"

I would like to add one more parameter to check attribute pwdchangedtime, for example:

filter = "(&(uid=%{User-Name})(o=COMPANY)(pwdchangedtime>`date --date="90 day ago" "+%Y%m%d%H%M%S"T`))"

How to realize this trick?

Regards

BS