Users on OpenLDAP 2.4 (SLES12SP5) may notice that they cannot access essential attributes like pwdLastChange before their passwords expire. In this article, we'll discuss how to grant access to these attributes.