Security Software

My problem:

I'm testing per account password policies and most of our ldap client apps are brain dead and won't display the "password is about to expire" message.

My Solution:

I was thinking of writing a "preop bind" plugin to send an email to the user. But, the way page 120 reads of the plugin developers guide, I can't "intercept" the "password expiring" control, LDAP_CONTROL_PWEXPIRING.

My other solution is to just write a script that does an ldapsearch for "passwordExpWarned != 0" and send an email notification. Call the script from cron and it's done.

I'd like to do this as a plugin, but the more I look, the less elegant the solution would be.

Any suggestions would be welcome.

Thanks,

Roger S.