OpenLDAP password policy response

Hello, I'm trying to pull the password policy response message from ldap_bind() method: password is expiring, password expired etc. While checking the packet content from OpenLDAP after ldap_bind() request, with Wireshark, there is a control hooked to the ldap_bind() response, were the message code and message text about password expiration is, but I can't manage to parse that message from response. I set the password policy request server control before the bind with ldap_set_option(). Any workaround or what am I doing wrong? <pre> <?php $address = 'x.x.x.x'; $dn = 'eduPersonPrincipalName=ex@ex,ou=People,ou=Users,dc=exa,dc=com'; $password = 'secret'; if($link = ldap_connect($address)) {

    ldap_set_option($link, LDAP_OPT_PROTOCOL_VERSION, 3);
    $ppolicy_control = array("oid" => "1.3.6.1.4.1.42.2.27.8.5.1","iscritical" => true);

if(!ldap_set_option($link,LDAP_OPT_SERVER_CONTROLS,array($ppolicy_control)))

    {
        echo "SERVER_CONTROLS not set\n";
    }

    if(ldap_bind($link, $dn, $password))
    {
        if($result = ldap_search($link, $dn, '(|(uid=ex))'))
        {
            $return = ldap_parse_result($link, $result, $errcode, $matcheddn, $errormsg, $ldapreferrals);
            var_dump($return);
            var_dump($errcode);
            var_dump($matcheddn);
            var_dump($errormsg);
            var_dump($ldapreferrals);

        }
    }
    else
    {
        echo 'Not Bound';
    }

} ldap_unbind($link); ?> </pre> ------ REGARDS, Andrius Kulbis