Full_Name: Gavin Henry Version: 2.3.35 and HEAD OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (212.159.59.85) Submitted by: ghenry

Dear all,

draft-behera-ldap-password-policy-xx.txt and ppolicy.schema list:

"A 000001010000Z value means that the account has been locked permanently, and that only a password administrator can unlock the account."

But pwdAccountLockedTime doesn't use integerMatch, so an example of the above syntax is needed with anything that has a generalizedTimeMatch. I think pwdAccountLockedTime is the only one?

Please correct me if I'm wrong, otherwise I'll update the man page.

Thanks,

Gavin.