Perform this procedure for all users who can assume a role.
Before You Begin
You must be in the Security Administrator role in the global zone.
# usermod -K lock_after_retries=no jdoe
To turn off account locking for an LDAP user, specify the LDAP repository.
# usermod -S ldap -K lock_after_retries=no jdoe