Lock Account Rule

The rule selected as the “Lock Account Rule” sets attributes in the IDMXUser view that cause an account to be locked. The full IDMXUser view is available to this rule. In addition, it takes the following argument:

lockExpirationDate: A possibly null java.util.Date at which the lock should expire.

This rule should update the IDMXUser view so that the LDAP account will be locked when the view is checked in.

The sample rule “Service Provider Example Lock Account Rule” on Sun Java System Directory Server 5.x. This sample rule expects that the accountUnlockTime and passwordRetryCount account attributes are defined in the LDAP resource schema map.