Unlock Account Rule

The rule selected as the “Unlock Account Rule” on the main configuration page sets attributes in the IDMXUser view that cause an account to be unlocked. The full IDMXUser view is available to this rule. The rule takes no additional arguments.

This rule should update the IDMXUser view so that the LDAP account will be unlocked when the view is checked in.

The sample rule “Service Provider Example Unlock Account Rule” operates on Sun Java System Directory Server 5.x. This rule expects that the accountUnlockTime and passwordRetryCount account attributes are defined in the LDAP resource schema map.