Radosław Antoniuk <[email protected]> writes: > On Mon, Jan 25, 2010 at 10:51 PM, Radosław Antoniuk > <[email protected]> wrote: >> Hi, >> >> Quick question. How is it possible to check the account lock status? >> I've configured the ppolicy according to the guide, the lock is >> working, the account is locked. >> And now how can I find out which accounts are currently locked out? > > > Ok, found it, one has to do a search with the filter > '(pwdAccountLockedTime=*)' . > The interesting thing is that the query returns proper objects (the > locked ones) but it does not list the pwdAccountLockedTime attribute. > Anybody knows why?
pwdAccountLockedTime is a operational attribute type, see man slapo-ppolicy(5). -Dieter -- Dieter Klünter | Systemberatung http://dkluenter.de GPG Key ID:8EF7B6C6 53°37'09,95"N 10°08'02,42"E
