Radosław Antoniuk <radek.antoniuk(a)gmail.com> writes:
On Mon, Jan 25, 2010 at 10:51 PM, Radosław Antoniuk
<radek.antoniuk(a)gmail.com> wrote:
> Hi,
>
> Quick question. How is it possible to check the account lock status?
> I've configured the ppolicy according to the guide, the lock is
> working, the account is locked.
> And now how can I find out which accounts are currently locked out?
Ok, found it, one has to do a search with the filter
'(pwdAccountLockedTime=*)' .
The interesting thing is that the query returns proper objects (the
locked ones) but it does not list the pwdAccountLockedTime attribute.
Anybody knows why?
pwdAccountLockedTime is a operational attribute type, see man
slapo-ppolicy(5).
-Dieter
--
Dieter Klünter | Systemberatung
http://dkluenter.de
GPG Key ID:8EF7B6C6
53°37'09,95"N
10°08'02,42"E