(2013/02/08 13:47), Todor Petkov wrote:
I followed this guide
to implement password lock policy. The user is locked, the automatic
unlock is also fine.
How can I check if the user is locked, is there any way to see it
using the 389-console or ldapsearch or phpldapadmin for example? I
checked and can not find any. I would like to be able to know that the
user can not log because he is locked and unlock it. I found out that
reseting the password works as unlocking, but is there another way?
389 users mailing list
How about searching
entries and get each accountUnlockTime and
$ ldapsearch -LLLx -h localhost -p 389 -D 'cn=directory manager' -w
password -b "ou=people,dc=example,dc=com" accountUnlockTime
retryCountResetTime shows when the entry was locked.
The account uid=tuser0 was locked until 20130208224324Z
(2012/02/08:22:43:24Z == 2012/02/08:14:43:24PST). But now it's unlocked.
The account uid=tuser1 is locked forever since it never reaches