ldapapacheds

where can i find "pwdAccountLockedTime" in Apache-DS LDAP?


I do right-click and choose "Fetch->Fetch operational attributes" but there is no pwdAccountLockedTime in attribute list. Where can i find pwdAccountLockedTime?

The Apache information is windows Apache Directory Studio(Version: 2.0.0.v20161101-M12)


Solution

  • EDIT : ads-pwdAccountLockedTime hinted that you use Apache Directory Server, the documentation to configure password policy is here

    You have to add the objectClass ads-passwordPolicy to be able to use the attributes on your entry

    --

    Apache Directory Studio is just a client which fetches informations from a directory.

    If you want to see the attribute, then the directory must have it stored.

    If you get "Warning! According to the schema attribute ads-pwdAccountLockedTime is not allowed." it's probably because you did not include the schema needed for the password policy to work properly or simply did not enabled the password policy (assuming you're using OpenLDAP)

    To do so, you need to enabled the ppolicy overlay and configure it correctly, which requires you to add the ppolicy.schema.

    See : http://www.openldap.org/doc/admin24/overlays.html and http://www.zytrax.com/books/ldap/ch6/ppolicy.html