get_pwd_last_set.py

#!/usr/bin/env python
import ldap

from utilities.conv_time import filetime_to_dt

# Instantiate LDAP object
l = ldap.initialize("ldap://1.1.1.1")
bind = l.simple_bind_s("[email protected]", "somePassw0rd")
l.protocol_version = ldap.VERSION3
l.set_option(ldap.OPT_REFERRALS, 0)


# Get password last set
def get_pwd_last_set(ldap_obj, base, user):
    criteria = "(&(objectClass=user)(sAMAccountName=" + user + "))"
    attributes = ['pwdLastSet']
    result = ldap_obj.search_s(base, ldap.SCOPE_SUBTREE, criteria, attributes)
    results = [entry for dn, entry in result if isinstance(entry, dict)]
    return filetime_to_dt(int(results[0].get('pwdLastSet')[0]))


print(get_pwd_last_set(l, "OU=Users,DC=ad,DC=office", "gordon.young"))