Hi Harry,
could you check the value of attribute type "passwordUnlock" under cn=config ?
thanks and regards,
German.
----- Original Message -----
From: "harry devine" <harry.devine(a)faa.gov>
To: 389-users(a)lists.fedoraproject.org
Sent: Friday, February 13, 2015 1:31:04 PM
Subject: Re: [389-users] Question about accountunlocktime
OK, I get that. What I don't get is why it won't automatically UNLOCK after
lockout duration. The accountunlocktime stays set forever, and as long as
that's set, the user can't log in and one of the admins has to clear the
accountunlock time attribute manually.
Thanks,
Harry
-----Original Message-----
From: 389-users-bounces(a)lists.fedoraproject.org
[mailto:389-users-bounces@lists.fedoraproject.org] On Behalf Of William
Sent: Thursday, February 12, 2015 9:54 PM
To: General discussion list for the 389 Directory server project.
Subject: Re: [389-users] Question about accountunlocktime
On Fri, 2015-02-13 at 01:49 +0000, harry.devine(a)faa.gov wrote:
> Any insight on this????
>
The value is utc. My current time is 13:16 UTC+10:30. When I lock the account
I get:
accountUnlockTime: 20150213031647Z
Split up is
2015-02-13 0316.47 UTC
Which is 1316 - 1030 = 0246
Add to this that my passwordLockoutDuration is 1800 aka 30 minutes:
0246 + 0030 = 0316.
Thus:
2015-02-13 0316.47 UTC
This is why you may see the accountUnlockTime in the past.
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users