I uuse exec module in ldap filter:
filter = "(&(uid=%{User-Name})(o=COMPANY)(pwdChangedTime>=%{exec:/usr/bin/
data.pl})(!(pwdAccountLockedTime=*)))"
perl script:
#!/usr/bin/perl -w
use strict;
use warnings;
use DateTime;
my $swstecz = 7776000;
my $imtemu = gen_filter($swstecz);
print "$imtemu";
sub gen_filter {
my ($warningtime) = @_;
my $dt = DateTime->now;
$dt->subtract(seconds => $warningtime);
my $filtertime = $dt->strftime('%Y%m%d%H%M%SZ');
return $filtertime;
}
and this work fine. Thanks Alan.
Regards
BS