I’ve noticed that when any of our users get locked out, the date that gets put into their accountunlocktime attribute is always in the past.  I have our 389-DS set to lock after 3 log in failures, and unlock after 30 minutes.  I’ve noticed that none of our users unlock without admin intervention.  We have to go into their account and delete the accountunlocktime and passwordretrycount attributes.


How can I straighten this out?



Harry Devine


Common ARTS Software Development