manage-account

Description

Access and alter password policy state properties for user entries.

Examples

manage-account get-all --hostname server.example.com --port 389 \
     --bindDN uid=admin,dc=example,dc=com --bindPassword password \
     --targetDN uid=jdoe,ou=People,dc=example,dc=com

manage-account set-account-is-disabled --hostname server.example.com --port 389 \
     --bindDN uid=admin,dc=example,dc=com --bindPassword password \
     --targetDN uid=jdoe,ou=People,dc=example,dc=com --operationValue true

manage-account set-account-is-disabled --hostname server.example.com --port 389 \
     --bindDN uid=admin,dc=example,dc=com --bindPassword password \
     --dnInputFile dn-input-file.txt --operationValue true

Subcommands

Clear account disabled state information from the user account

Display when the user account will expire

Display information about whether the user account has been administratively disabled

Display all password policy state information for the user

Display the authentication failure times for the user

Display the grace login use times for the user

Determine whether the user has a valid retired password that may be used for authentication

Display the time that the user last authenticated to the server

Display the required password change time with which the user last complied

Display the time that the user's password was last changed

Display the time that the user first received an expiration warning notice

Display password history state values for the user

Display information about whether the user will be required to change his or her password on the next successful authentication

Display the DN of the password policy for the user

Get the time the user's former password was retired

Display the number of remaining authentication failures until the user's account is locked

Display the number of grace logins remaining for the user

Get the time the user's retired password will expire

Display the length of time in seconds until the user account expires

Display the length of time in seconds until the authentication failure lockout expires

Display the length of time in seconds until the user's account is locked because it has remained idle for too long

Display length of time in seconds until the user's password expires

Display the length of time in seconds until the user should start receiving password expiration warning notices

Display the length of time in seconds until the user's account is locked because the user failed to change the password in a timely manner after an administrative reset

Display the length of time in seconds that the user has to change his or her password before the account becomes locked

Purge any retired password from the user's entry

Specify whether the user account has been administratively disabled

Arguments

-V
--version

-H
--help

--help-ldap

--help-sasl

--help-debug

-h {host}
--hostname {host}

-p {port}
--port {port}

-Z
--useSSL

-q
--useStartTLS

-D {bindDN}
--bindDN {bindDN}

-w {bindPassword}
--bindPassword {bindPassword}

-j {bindPasswordFile}
--bindPasswordFile {bindPasswordFile}

-b {targetDN}
--targetDN {targetDN}

-o {name=value}
--saslOption {name=value}

-X
--trustAll

-K {keystorePath}
--keyStorePath {keystorePath}

-W {keystorePassword}
--keyStorePassword {keystorePassword}

-u {keystorePasswordFile}
--keyStorePasswordFile {keystorePasswordFile}

-N {nickname}
--certNickname {nickname}

-P {truststorePath}
--trustStorePath {truststorePath}

-T {truststorePassword}
--trustStorePassword {truststorePassword}

-U {path}
--trustStorePasswordFile {path}

--dnInputFile {dnInputFile}

--help-subcommands