Note: this component is designated "advanced", which means that objects of this type are not expected to be created or altered in most environments. If you believe that such a change is necessary, you may want to contact support in order to understand the potential impact of that change.
The No Operation Failure Lockout Action does not take any action for accounts that have too many failed authentication attempts, but it allows the server to perform additional processing under such conditions, like generate account status notifications to notify the end user or server administrators of the problem.
The No Operation Failure Lockout Action component inherits from the Failure Lockout Action
The properties supported by this managed object are as follows:
| Basic Properties: | Advanced Properties: |
|---|---|
| description | None |
| generate-account-status-notification |
| Description | A description for this Failure Lockout Action |
| Default Value | None |
| Allowed Values | A string |
| Multi-Valued | No |
| Required | No |
| Admin Action Required | None. Modification requires no further action |
generate-account-status-notification
| Description | Indicates whether to generate an account status notification for cases in which this failure lockout action is invoked for a bind attempt with too many outstanding authentication failures. |
| Default Value | false |
| Allowed Values | true false |
| Multi-Valued | No |
| Required | No |
| Admin Action Required | None. Modification requires no further action |
To list the configured Failure Lockout Actions:
dsconfig list-failure-lockout-actions
[--property {propertyName}] ...
To view the configuration for an existing Failure Lockout Action:
dsconfig get-failure-lockout-action-prop
--action-name {name}
[--tab-delimited]
[--script-friendly]
[--property {propertyName}] ...
To update the configuration for an existing Failure Lockout Action:
dsconfig set-failure-lockout-action-prop
--action-name {name}
(--set|--add|--remove) {propertyName}:{propertyValue}
[(--set|--add|--remove) {propertyName}:{propertyValue}] ...
To create a new No Operation Failure Lockout Action:
dsconfig create-failure-lockout-action
--action-name {name}
--type no-operation
[--set {propertyName}:{propertyValue}] ...
To delete an existing Failure Lockout Action:
dsconfig delete-failure-lockout-action
--action-name {name}