Active Directory Password Expiration Check

#!/bin/bash
# <xbar.title>Active Directory Password Expiration Check</xbar.title>
# <xbar.version>v1.0</xbar.version>
# <xbar.author>Galen Sprague</xbar.author>
# <xbar.author.github>gsprague</xbar.author.github>
# <xbar.desc>Shows Active Directory Password Expiration in days</xbar.desc>
# <xbar.image></xbar.image>
# <xbar.dependencies>bash</xbar.dependencies>
# <xbar.abouturl></xbar.abouturl>

# Set environment vars
DOMAIN="yourDomain"
# Set password policy in days
PWPOLICY="90"

# Get logged in user
#CURRENTUSER=$(ls -l /dev/console | cut -d " " -f4)
CURRENTUSER=$(id -un)

# Get data from AD
LASTPWDMS=$(dscl /Active\ Directory/"$DOMAIN"/All\ Domains -read /Users/"$CURRENTUSER" | grep -i "SMBPasswordLastSet" | cut -d ' ' -f 2 | tail -1)
if [[ $LASTPWDMS == "" ]]
then
	# No access to AD
	echo "AD NA"
else
	# Get the current UNIX date
	TODAYUNIX=$(date +%s)

	# Convert last set value
	LASTPWDUNIX=$((LASTPWDMS/10000000-11644473600))

	# Subtract last set value from current UNIX date
	DIFFUNIX=$((TODAYUNIX-LASTPWDUNIX))

	# Calculate in days
	DIFFDAYS=$((DIFFUNIX/86400))

	# Subtract password policy from days
	PASSWORDEXPIRATION=$((PWPOLICY-DIFFDAYS))

	echo "Password expires in $PASSWORDEXPIRATION days"
fi

exit 0