Bug 54227 - account/userexpiry shown in UMC/UDM differs from value shown in MS ADUC
account/userexpiry shown in UMC/UDM differs from value shown in MS ADUC
Status: NEW
Product: UCS
Classification: Unclassified
Component: UMC - Users
UCS 5.0
Other Linux
: P5 normal (vote)
: ---
Assigned To: UMC maintainers
UMC maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2021-12-08 19:12 CET by Arvid Requate
Modified: 2023-03-23 11:12 CET (History)
1 user (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2021-12-08 19:12:09 CET
The GUI tool "Active Directory Users and Computers" (ADUC) doesn't show the actual value of the Active Directory attribute "accountExires", but rather it shows the last day, when the account is still usable.

Example: If I select "today" (2021-12-08) in ADUC then it interprets this as end of day localtime and writes:

  accountExpires: 132834780000000000

which is

  GMT: Wed, 08 Dec 2021 23:00:00 GMT
  Your time zone: Thu Dec 09 2021 00:00:00 GMT+0100 (Central European Standard Time)
  

UMC/UDM behave differently and show the day that the account actually is exired. In my example UMC shows "09.12.2021" and UDM shows userexpiry: 2021-12-09.

This means that administrators may get confused by the difference between the dates shown in MS ADUC and UMC/UDM. Maybe we should improve the tooltip and documentation to explain this.