I tried this but nothing changed.
I see in my AD that useraccountcontrol is still at accountdisable for a
user who is still active...
maybe there is a mistake in my test ...and i don't see it....
<name>userAccountControl</name>
<policy>FORCE</policy>
<createValues>
<string>
if (srcBean.getDatasetById("pwdAccountLockedTime") == null
{
AD.userAccountControlSet( "0", [ AD.UAC_SET_NORMAL_ACCOUNT,
AD.UAC_UNSET_ACCOUNTDISABLE]);
}
{
AD.userAccountControlSet( "0", [ AD.UAC_SET_ACCOUNTDISABLE]);
</string>
</createValues>
</dataset>
<dataset>
<name>pwdLastSet</name>
<policy>KEEP</policy>
<createValues>
<string>"0"</string>
</createValues>
</dataset>
<dataset>
<name>UnicodePwd</name>
<policy>KEEP</policy>
<createValues>
<string>AD.getUnicodePwd("changethis")</string>
</createValues>
</dataset>
</propertiesBasedSyncOptions>
</task>
</tasks>
</lsc>
Regards,
LMP
On 28/02/14 09:03, Raphaël Ouazana-Sustowski wrote:
> Hi,
>
> Le 27/02/2014 18:21, Plumel Louis-Marie a écrit :
>> I think i was not as explicit as i would like.
>>
>> As you know, in openldap when we want to locked a user , the
>> operational attribute "pwdAccountLockedTIme" is create with a value
>> inside.
>> This operational attribute doesn't exist for others users.
>>
>> I need to check if this operational attribute exist or not. I don't
>> find on the www how to do this.
>
> You can check if srcBean.getDatasetById("pwdAccountLockedTime") is
> null or not.
>
> Regards,
> Raphaël Ouazana.
>
> _______________________________________________________________
> Ldap Synchronization Connector (LSC) - http://lsc-project.org
>
> lsc-users mailing list
> [email protected]
> http://lists.lsc-project.org/listinfo/lsc-users
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org
lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users
