in reply to Finding Last Password Change Time In OpenLDAP
Don't know about OpenLDAP, but our EDirectory stores the password expiration date as "passwordExpirationTime" in Greenwich Mean Time and yyyyMMddhhmmss format. We use that to calculate the days til expiration and send email notices accordingly.