For some strange reason, my ppolicy schema does not have
pwdAccountLockedTime attribute. How can I add this attribute now ?
On Wed, Jul 2, 2014 at 8:23 PM, Clément OUDOT <clem.oudot(a)gmail.com> wrote:
2014-07-02 16:34 GMT+02:00 Udai Singh Mehra (Vizury) <
udai.mehra(a)vizury.com>:
> Hello,
>
> I am trying to develop a mechanism using which the users who left the
> organization can be easily identified and hence set their account as
> disabled. Is there any schema already available for this? I would
> appreicate if I can get to know anyone who has already encountered this
> situation and fixed the problem.
>
For this, I use password policy overlay, and set pwdAccountLockedTime in
user entry to disable it. Else you need to create a specific schema with a
custom attribute and adapt the ACL to disable the account.
Clément.
--
Udai Singh Mehra
Infrastructure Engineering and Operations