This control may be included in the response to an add request that included the generate password request control, and it provides information about the password that was generated. The control has an OID of 1.3.6.1.4.1.30221.2.5.59, and it takes a value. The following fields may be present in the value-json representation of the value:

• generated-password: A string field that holds the password that was generated for the entry.

• must-change-password: A Boolean field that indicates whether the user must choose a new password before they will be allowed to request any other operations.

• seconds-until-expiration: An optional integer field that indicates the number of seconds until the new password expires.

The following represents an example JSON encoding for the control:

{ "oid":"1.3.6.1.4.1.30221.2.5.59",
  "control-name":"Generate Password Response Control",
  "criticality":false,
  "value-json":{ "generated-password":"CorrectHorseBatteryStaple",
                 "must-change-password":true,
                 "seconds-until-expiration":86400 } }