How to retrieve Crowd password last updated value?

Derek Sheeman

Is there a way to retrieve the 'passwordLastChanged' value from the crowd internal user database, or find informaion on how it is calculated. We would like to poll this value or recalculate it from the underlying MySQL database in order to notify users of passwords expiring soon.

We had something, but with the crowd 2.7.1 something in the behaivor broke that.

Caspar Krieger

You can extract the password changed attribute from the cwd_user_attribute table:

select * from cwd_user_attribute inner join cwd_user
on cwd_user_attribute.user_id = cwd_user.id
where attribute_name = 'passwordLastChanged';

Note that this information is only recorded for Crowd internal directories; LDAP (whether cached, uncached, and delegated authentication) connectors do not store this information for users because user authentication in these cases is done by sending the user's password to the LDAP server for verification. Hence, in those cases you'll have to check your LDAP server for the details (this may not apply to you, but noting it here to save future searchers some time).