ppolicy, is a password reset the only way to unlock an account?

[Sam Tran]

Hi All,

I am currently testing slapo-ppolicy in OL 2.3.35.
I have the following ppolicy:

pwdFailureCountInterval: 0
pwdGraceAuthNLimit: 0
pwdInHistory: 0
pwdLockout: TRUE
pwdLockoutDuration: 0
pwdMaxFailure: 3
pwdMustChange: FALSE
pwdSafeModify: FALSE

My question is the following:
Let's say I lock my account after 3 unsuccessful binds. Is a password
reset the only way to unlock it?

Thanks,
Sam