LDAP Password Expire / Change in APM

I have to wonder if the LDAP attributes for account password information are dependent on the system employed. In AD you can use the pwdLastSet and userAccountControl (to see if the account expires at all) values, but I believe that is generally arbitrary in any given LDAP directory. In any case, while you may not be able to change the password with APM, you should certainly be able to query for a value with an LDAP query agent and make a decision based on results (i.e. message box to user indicating impending expiration).