Openldap ppolicy, how to unlock account?

Question

I have enabled OpenLDAP password policy overlay and account lockout is now working fine. On 5 authentication failures the account is getting locked out. On resetting the password the account becomes open again. Any way to unlock it other than resetting the password.

Answer 1

Set pwdLockoutDuration attribute to some amount; the value is in seconds. I think that by default it is 0 (infinite).

Unlock the account manually without need for resetting the password by removing the operational attribute pwdAccountLockedTime.