Ronald Wimmer via FreeIPA-users wrote:
Is it possible? If yes what needs to be done?
Set nsaccountlock to TRUE/FALSE. This is an operational attribute so
when searching for it you have to specify it as an attribute you want to
see with ldapsearch.
rob