Unable To Activate Accounts Using "dsutil" As Cn="Directory Manager" (Doc ID 2121388.1)

Last updated on MAY 21, 2016

Applies to:

Oracle Directory Server Enterprise Edition - Version 11.1.1.7.3 and later
Information in this document applies to any platform.

Symptoms

Using dsutil account-activate may not work to activate accounts that show the nsAccountLock: true. 

Using dsutil account-inactivate may not work to inactivate accounts that show the nsAccountLock: false.

 

Changes

Using dsutil account-inactivate without using the corresponding dsutil account-activate may result in an account that is not active or inactive.

If the account attribute nsAccountLock was updated by an attribute update rather than the dsutil account-activate the account may not be unlocked or locked.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms