I've noticed that when any of our users get locked out, the date that gets put into
their accountunlocktime attribute is always in the past. I have our 389-DS set to lock
after 3 log in failures, and unlock after 30 minutes. I've noticed that none of our
users unlock without admin intervention. We have to go into their account and delete the
accountunlocktime and passwordretrycount attributes.
How can I straighten this out?
Thanks,
Harry Devine
DOT/FAA/AJM-245
Common ARTS Software Development
harry.devine(a)faa.gov
(609)485-4218