We are planning to use CA PAM to manage the service accounts so the passwords are updated on a regular basis. One of the challenge here is this change should be notified to the service owner in advance so he is prepared for this.
I don't see this option is available OOB in CA PAM so i want to do this externally using a script, which run on a daily basis, identify the accounts with expiring password (based on the password age) and then notify the owner.
For this to work i should be able to fetch the user information and the password age from the PAM device programatically and calculate the date/time of the change.
Is this possible with credential management CLI interface? if yes please provide the guidance.