An explanation of the shadowAccount attributes in LDAP. These correspond to the fields in /etc/shadow
shadowLastChange – number of days since January 1, 1970 that the password was last changed.
shadowMin – number of days before the password can be changed (typically 0).
shadowMax – number of days before the password must be changed (typically 99999).
shadowWarning – number of days to warn user of an expiring password (typically 7).
shadowInactive – number of days after password expires that account is disabled.
shadowExpire – number of days since January 1, 1970 that the account was disabled.
shadowFlag – reserved.