pwdAccountLockedTime

- Directory Server defined password policy attribute type

Synopsis

( 1.3.6.1.4.1.42.2.27.8.1.17
 NAME 'pwdAccountLockedTime'
 DESC 'Directory Server defined password policy attribute type'
 SYNTAX 1.3.6.1.4.1.1466.115.121.1.24
 SINGLE-VALUE
 NO-USER-MODIFICATION
 USAGE directoryOperation
 X-DS-USE 'internal'
 X-ORIGIN 'Password Policy for LDAP Directories Internet Draft' )

Description

Holds the time that the user's account was locked. A locked account means that the password may no longer be used to authenticate.

A value of 000001010000Z means the account has been locked permanently, and that only a password administrator can unlock the account.

SYNTAX

Generalized Time, single-valued.

Usage

Attribute specific to this Directory Server instance and version of the schema.

Operational attribute used by the directory service; returned in ldapsearch only when specifically requested.

The value of this attribute may only be modified by the server.

Examples

pwdAccountLockedTime: 20050103121520Z

Attributes

See attributes(5) for descriptions of the following attributes: