To use the nsAccountLock attribute to disable and enable accounts, configure the LDAP resource as follows:
