Tuesday, June 23, 2009

nsaccountlock

Just a note to self:

To lock a user’s account on Sun Directory Server, add the key/value pair “nsaccountlock: TRUE” to their entry.

dn: uid=someuser,ou=people,dc=example,dc=com
changetype: modify
add: nsaccountlock
nsaccountlock: TRUE

To unlock, change value of nsaccounlock to “FALSE” or delete the entire attribute.