Unlock an account or a role as shown here.
You must bind as the Directory Manager.
You cannot use DSCC to perform this task. Use the command line, as described in this procedure.
Use the dsutil account-activate command to reactivate the account or role.
The following command renders Barbara Jensen's account active again:
$ dsutil account-activate -p port-number -w pwd.txt \ uid=bjensen,ou=people,dc=example,dc=com uid=bjensen,ou=people,dc=example,dc=com activated. |
dsutil(1M) man page for details.