Title: #444: Allow nsaccountlock to be searched in user-find commands
@redhatrises IMO for new users we can always create that attribute in LDAP,
that should limit bad behavior. I wouldn't add it to user-add, usually you
wants to create an enabled user, for disabled you can use stage-user. I hope
that activating of stage user creates this attribute in LDAP as well.
However this need a discussion, if it is a proper approach is the right.
BTW you can open a new PR we shouldn't continue here.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code