Situation
You want to get an overview of all the user accounts that need to change their password or will have to change it in the near future.
Solution
You can get a list of those objects with udm like this:
Example 1: For all users whose password will expire in 2024 or is already expired:
udm users/user list --filter "(&(krb5PasswordEnd>=20240101000000Z)(krb5PasswordEnd<=20241231000000Z))"
Example 2: For all teachers whose password has already expired:
udm users/user list --filter "(&(shadowMax=1)(objectClass=ucsschoolTeacher))"