wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== Active Directory (AD) date format and conversion ======

<cli prompt='#'>
# ldapsearch -L -D ... '(&(objectclass=*)(uid=*))'
</cli>
<cli>
dn: CN=MyUser1
whenCreated: 20181220050716.0Z   ==> date
whenChanged: 20220314093553.0Z   ==> date
...
badPasswordTime: 132899094202005830
lastLogoff: 0
lastLogon: 132875084527318818
pwdLastSet: 132917241531383724
accountExpires: 9223372036854775807
</cli>

accountExpires: 9223372036854775807 ==> Never expires (no need to convert)

pwdLastSet ==> value in 100 nanoseconds from 1 january 1601

Seconds between 1 january 1601 and 1 january 1970: 11644473600000

Converting this value to EPOCH:
  epoch_seconds=((windows_value_100nano)-(11644473600000 * 10000)) /10000000
  
Once converted to EPOCH, you can use the linux date command like this
  date -d@1646642232 +"%Y-%m-%d %H:%M:%S"

wiki

User Tools

Site Tools

Page Tools