{"id":2263,"date":"2013-02-05T15:17:41","date_gmt":"2013-02-05T13:17:41","guid":{"rendered":"http:\/\/www.laurentmarot.fr\/wordpress\/?p=2263"},"modified":"2013-02-07T18:44:00","modified_gmt":"2013-02-07T16:44:00","slug":"remove-nsaccountlock-attribute-in-sun-directory-server","status":"publish","type":"post","link":"https:\/\/www.laurentmarot.fr\/wordpress\/?p=2263","title":{"rendered":"Remove nsAccountLock attribute in Sun Directory Server"},"content":{"rendered":"<div id=\"attachment_2280\" style=\"width: 254px\" class=\"wp-caption alignleft\"><a href=\"http:\/\/www.laurentmarot.fr\/wordpress\/wp-content\/uploads\/2013\/02\/ldapadmin.jpg\" rel=\"lightbox[2263]\"><img loading=\"lazy\" decoding=\"async\" aria-describedby=\"caption-attachment-2280\" class=\"size-full wp-image-2280\" title=\"ldapadmin : very meaningfull message\" src=\"http:\/\/www.laurentmarot.fr\/wordpress\/wp-content\/uploads\/2013\/02\/ldapadmin.jpg\" alt=\"ldapadmin\" width=\"244\" height=\"132\" \/><\/a><p id=\"caption-attachment-2280\" class=\"wp-caption-text\">ldapadmin<\/p><\/div>\n<p>Bad day, today !\u00a0 I&rsquo;ve waste hours googling to find how to remove nsAccountLock attribute of an inetOrgPerson in Sun Directory Server. So I hope that this post will be helpfull for some other tech guys.<\/p>\n<p>&nbsp;<\/p>\n<p>I had already spend a few minutes wondering what the LDAPAdmin crappy tool means displaying \u00ab\u00a0\u00a0\u00bb. I needed then some time to remember that particular attributes were not not shown by default. So I ran another ldapsearch query explicitely asking for diplaying \u00ab\u00a0nsAccountLock\u00a0\u00bb. And could easily understand the resaon why I Ccould not bind !<\/p>\n<p>Problem seen is half solved, no ? So, I start thinking about how to delete this f&#8230; attribute or modify its value to \u00ab\u00a0FALSE\u00a0\u00bb.<\/p>\n<p>First point : you won&rsquo;t find anything in the Oracle Directory Server Control Center ( <em>web<\/em>-based <em>interface to <\/em>access and manage <em>server<\/em> instances ). Second, LDAP Admin tools won&rsquo;t allow you to edit directly the nsAccountLock attribute even then to see its value.<\/p>\n<p>The only way I&rsquo;ve found was to use ldif commands. LDIF is\u00a0 not my favorite format for managing directory content, neither is DSML :-). I had to google once again to find right syntax for removing\/editing an attribute.<\/p>\n<p>Finally, I chose the following one that, wich of course did not work from LDAPAdmin import feature. I didn&rsquo;t undestand why. So I also try the \u00ab\u00a0modify\u00a0\u00bb syntax in various tests. I finally switch to Apache Directory Studio to solve this issue.<\/p>\n<pre style=\"padding-left: 30px;\"><span style=\"color: #008000;\">dn: cn=7121,CN=3ce5f7gha2,OU=AEMIDENTITY,dc=iam,dc=marot,dc=fr<\/span><\/pre>\n<pre style=\"padding-left: 30px;\"><span style=\"color: #008000;\">changetype: modify<\/span><\/pre>\n<pre style=\"padding-left: 30px;\"><span style=\"color: #008000;\">delete: nsAccountLock<\/span><\/pre>\n<pre style=\"padding-left: 30px;\"><span style=\"color: #008000;\">nsAccountLock: TRUE<\/span><\/pre>\n\n","protected":false},"excerpt":{"rendered":"<p>Bad day, today !\u00a0 I&rsquo;ve waste hours googling to find how to remove nsAccountLock attribute of an inetOrgPerson in Sun Directory Server. So I hope that this post will be helpfull for some other tech guys. &nbsp; I had already spend a few minutes wondering what the LDAPAdmin crappy tool means displaying \u00ab\u00a0\u00a0\u00bb. I needed [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[],"_links":{"self":[{"href":"https:\/\/www.laurentmarot.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2263"}],"collection":[{"href":"https:\/\/www.laurentmarot.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.laurentmarot.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.laurentmarot.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.laurentmarot.fr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2263"}],"version-history":[{"count":12,"href":"https:\/\/www.laurentmarot.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2263\/revisions"}],"predecessor-version":[{"id":2265,"href":"https:\/\/www.laurentmarot.fr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2263\/revisions\/2265"}],"wp:attachment":[{"href":"https:\/\/www.laurentmarot.fr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2263"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.laurentmarot.fr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2263"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.laurentmarot.fr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2263"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}