Does Red Hat Directory Server Password Sync plug-in automatically update the shadowLastChange attribute?

Solution Unverified - Updated -


  • We are looking into utilizing password sync from Microsoft AD either by the RedHat sync plug-in or a Third Party application. The functionality to change the shadowlastchange is going to be crucial for this
  • AIX platform looks at the shadowLastChange instead of "passwordExpirationTime" attribute for password expiry, but is not setting this attribute when a password is reset, so we get an inconsistent behaviour.


  • Red Hat Directory Server (RHDS) 10
  • Microsoft Active directory
  • AIX clients

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content