On Tue, Jul 17, 2012 at 10:10 PM,
<harry.devine@faa.gov>
wrote:
We have several users who no longer
need access, but may in the future, so we have set them to
be Inactive
in their profile. However, we noticed that these accounts
have re-activated
themselves and those users could log back in if they wanted
to. How
do we make accounts that we specifically make inactive by
pressing the
Inactivate button stay that way?
We are using the following 389
versions
on CentOS 5.7 64-bit:
389-ds-base-1.2.9.9-1.el5
389-admin-1.1.29-1.el5
389-ds-console-1.2.6-1.el5
389-adminutil-1.1.15-1.el5
389-admin-console-1.1.8-1.el5
389-ds-console-doc-1.2.6-1.el5
389-ds-base-libs-1.2.9.9-1.el5
389-dsgw-1.1.9-1.el5
389-console-1.1.7-3.el5
389-admin-console-doc-1.1.8-1.el5
389-ds-1.2.1-1.el5
Thanks for any help!
Harry
Add below attribute with same value in user's ldap entry.
nsAccountLock: true
# cat entry.ldif
dn: uid=tuser, ou=people,dc=example,dc=com
changetype: modify
add: nsaccountlock
nsaccountlock: true
# ldapmodify -x -a -D "cn=Directory manager" -w password -f
entry.ldif