Exact query that Jira sends to Active Directory for authentication.

[Miwa Egner]

Dear all, I would like to know the exact LDAP query that Jira sends to Active Directory. 

Specifically the part Jira checks if the account is expires or not. Our investigation turns out following. I appreciate it, if anyone can confirm this is a standard, harmless query. 

...

(accountExpires=0)

OR (!(accountExpires=*))

OR (accountExpires>=1333...123456)

...

The problem is Active Directory does not like when someone inquires 'accountExpires=0' (= account never expires).

Thank you so much, 

[Erik Alejos]

Hello, I've been asked to atlassian support and it's a normal behaviour. I attach their answer. I hope helps you!