# force user to change password on next login

			shadow_last_change = '0'

			shadowMax = "1"

		elif modifypassword or (unset_pwd_change_next_login and old_shadow_last_change == '0') or (pwhistoryPolicy.expiryInterval and not old_shadow_last_change):

		elif not pwhistoryPolicy.expiryInterval or unset_pwd_change_next_login:

			# 1. The password was changed

			# 1. no pw expiry interval is defined or

			# 2. User doesn't need to change password on next login anymore

			# 2. remove that user has to change password on next login

			# 3. a password history policy exists but no last password change date

			shadowMax = ''

			shadow_last_change = str(int(long(time.time()) / 3600 / 24))

		if pwhistoryPolicy.expiryInterval:

			# a password history policy exists

			shadow_max = pwhistoryPolicy.expiryInterval

			shadowMax = pwhistoryPolicy.expiryInterval

			# no password history policy exists anymore (could be removed)

			shadow_max = ''

		old_shadowMax = self.oldattr.get('shadowMax', [''])[0]

		if old_shadowMax != shadowMax:

			ml.append(('shadowMax', old_shadowMax, shadowMax))

		now = (long(time.time()) / 3600 / 24)

		if old_shadow_last_change != shadow_last_change:

		shadowLastChange = ''

			ml.append(('shadowLastChange', old_shadow_last_change, shadow_last_change))

		if pwhistoryPolicy.expiryInterval or unset_pwd_change_next_login:

			shadowLastChange = str(int(now))

		if pwd_change_next_login:

			shadowLastChange = str(int(now) - int(shadowMax) - 1)

		if shadowLastChange:  # FIXME: this check causes, that the value is not unset. Is this correct?

		if old_shadow_max != shadow_max:

			ml.append(('shadowLastChange', self.oldattr.get('shadowLastChange', [''])[0], shadowLastChange))

			ml.append(('shadowMax', old_shadow_max, shadow_max))