On Mon, Jan 25, 2010 at 10:51 PM, Radosław Antoniuk <radek.anton...@gmail.com> wrote: > Hi, > > Quick question. How is it possible to check the account lock status? > I've configured the ppolicy according to the guide, the lock is > working, the account is locked. > And now how can I find out which accounts are currently locked out?
Ok, found it, one has to do a search with the filter '(pwdAccountLockedTime=*)' . The interesting thing is that the query returns proper objects (the locked ones) but it does not list the pwdAccountLockedTime attribute. Anybody knows why? Thanks, Radek