JAMF Extension Attribute for Days until Password Expires for Currently Logged in User.

password-expires.sh

#!/bin/sh
#####################################################################################################
#
# ABOUT THIS PROGRAM
#
# NAME
#       Gives the number of days left until password expiration as an extension attribute.
#
####################################################################################################
#
# HISTORY
#
#   Version: 1.0
#   - Brian Monroe, 24.01.2020
#
####################################################################################################

# Get the home directory path of the user that's currently logged into the console.
UserHome="/Users/`stat -f '%Su' /dev/console`"

# Grabs the epoc time from the home folder when the password was last set and converts it to days.
DaysSinceChange=$(( ( `date +%s` - `dscl . read ${UserHome} | grep -A 1 passwordLastSetTime | grep -Eo '[0-9]{10,25}'` ) / 86400 ))

# Greps the days from the pwpolicy in place from JAMF
PolicyDays=$( pwpolicy -getaccountpolicies | grep -A 1 '<key>policyAttributeExpiresEveryNDays</key>' | grep -Eo '[0-9]+' )

# Find the days left
DaysLeft=$(( $PolicyDays - $DaysSinceChange ))

# Exit if something went wrong
if [ ${DaysLeft} -le 0 ]; then
        exit 0
fi

echo "<result>${DaysLeft}</result>"