[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Ppolicy, password lockout status

To: openldap-technical@openldap.org
Subject: Re: Ppolicy, password lockout status
From: "Dieter Kluenter" <dieter@dkluenter.de>
Date: Tue, 26 Jan 2010 07:49:50 +0100
In-reply-to: <49dc90fd1001251406w723e3effo3e1b501f8deff1cf@mail.gmail.com> (Rados's message of "Mon, 25 Jan 2010 23:06:22 +0100")
References: <49dc90fd1001251351l4b764aa0j3a2a96dfa296cda9@mail.gmail.com> <49dc90fd1001251406w723e3effo3e1b501f8deff1cf@mail.gmail.com>
User-agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.5-b28 (linux)

Radosław Antoniuk <radek.antoniuk@gmail.com> writes:

> On Mon, Jan 25, 2010 at 10:51 PM, Radosław Antoniuk
> <radek.antoniuk@gmail.com> wrote:
>> Hi,
>>
>> Quick question. How is it possible to check the account lock status?
>> I've configured the ppolicy according to the guide, the lock is
>> working, the account is locked.
>> And now how can I find out which accounts are currently locked out?
>
>
> Ok, found it, one has to do a search with the filter
> '(pwdAccountLockedTime=*)' .
> The interesting thing is that the query returns proper objects (the
> locked ones) but it does not list the pwdAccountLockedTime attribute.
> Anybody knows why?

pwdAccountLockedTime is a operational attribute type, see man
slapo-ppolicy(5). 

-Dieter

-- 
Dieter Klünter | Systemberatung
http://dkluenter.de
GPG Key ID:8EF7B6C6
53°37'09,95"N
10°08'02,42"E

References:
- Ppolicy, password lockout status
  - From: Radosław Antoniuk <radek.antoniuk@gmail.com>
- Re: Ppolicy, password lockout status
  - From: Radosław Antoniuk <radek.antoniuk@gmail.com>

Prev by Date: Re: LDAP logging
Next by Date: Re: LDAP logging
Index(es):
- Chronological
- Thread