6330N/A<?
xml version="1.0" encoding="UTF-8"?>
6330N/A ! This work is licensed under the Creative Commons 6330N/A ! Attribution-NonCommercial-NoDerivs 3.0 Unported License. 6330N/A ! To view a copy of this license, visit 6330N/A ! or send a letter to Creative Commons, 444 Castro Street, 6330N/A ! Suite 900, Mountain View, California, 94041, USA. 6330N/A ! You can also obtain a copy of the license at 6330N/A ! See the License for the specific language governing permissions 6330N/A ! and limitations under the License. 6330N/A ! If applicable, add the following below this CCPL HEADER, with the fields 6330N/A ! enclosed by brackets "[]" replaced with your own identifying information: 6330N/A ! Portions Copyright [yyyy] [name of copyright owner] 6330N/A ! Copyright 2011-2012 ForgeRock AS 6330N/A ! Portions Copyright 2013 Jens Elkner 6330N/A version="5.0" xml:
lang="en" 6330N/A <
refentrytitle><
application>manage-account</
application></
refentrytitle>
6330N/A <
xi:
include href="common.xml" xpointer='xpointer(//manvolnum[@name="v1m"])'/>
6330N/A <
refname><
application>manage-account</
application></
refname>
6330N/A <
refpurpose>manage state of directory server accounts</
refpurpose>
6330N/A <
command>manage-account</
command>
6330N/A <
arg choice="plain"><
replaceable>subcommand</
replaceable></
arg>
6330N/A <
arg>-b <
replaceable class="parameter">targetDN</
replaceable></
arg>
6330N/A xpointer='xpointer(//para[@name="s-remote"]/*[not(@name="sc-contimeout")])'/>
6330N/A xpointer='xpointer(//para[@name="s-auth"]/*[not(@name="sc-sasl")])'/>
6330N/A xpointer='xpointer(//para[@name="s-misc"]/*[@name="sc-verbose"])'/>
6330N/A xpointer='xpointer(//para[@name="s-general"]/*)'/>
6330N/AThis utility can be used to retrieve and manipulate the values of password
6330N/A <
para>The following subcommands are supported.</
para>
6330N/A $ print '<?xml version="1.0" encoding="UTF-8"?>\n<refentry>' >$FNAME 6330N/A $ print '</refentry>' >>$FNAME 6330N/A <
title>Global Options</
title>
6330N/A <
para>The following global options are supported.</
para>
6330N/A <
term><
option>-b, --targetDN</
option> <
replaceable 6330N/A class="parameter">targetDN</
replaceable></
term>
6330N/AThe DN of the user entry for which to get and set password policy state
6330N/A <
title>LDAP Connection Options</
title>
6330N/A xpointer='xpointer(//para[@name="l-remote"]/*[not(@name="lc-contimeout")])'/>
6330N/A xpointer='xpointer(//para[@name="l-auth"]/*[not(@name="lc-sasl")])'/>
6330N/A xpointer='xpointer(//para[@name="l-misc"]/*[@name="lc-verbose"])'/>
6330N/A <
title>General Options</
title>
6330N/A xpointer='xpointer(//para[@name="l-general"]/*)'/>
6330N/AFor the following examples, the directory admin user, Kirsten Vaughan, has
6330N/A<
literal>ds-privilege-name: password-reset</
literal>, and the following ACI on
6330N/A<
literal>ou=People,dc=example,dc=com</
literal>.
6330N/A(target="ldap:///ou=People,dc=example,dc=com") (targetattr ="*||+")(
6330N/A version 3.0;acl "Admins can run amok"; allow(all) groupdn =
6330N/A "ldap:///cn=Directory Administrators,ou=Groups,dc=example,dc=com";)
6330N/AThe following command locks a user account.
6330N/A>$ </
prompt><
command>manage-account set-account-is-disabled -O true -p 4444 -w bribery \
6330N/A -D "uid=kvaughan,ou=people,dc=example,dc=com" \
6330N/A -b uid=bjensen,ou=people,dc=example,dc=com -X</
command></
literallayout>
6330N/AThe following command unlocks a user account.
6330N/A>$ </
prompt><
command>manage-account clear-account-is-disabled -p 4444 -w bribery \
6330N/A -D "uid=kvaughan,ou=people,dc=example,dc=com" \
6330N/A -b uid=bjensen,ou=people,dc=example,dc=com -X</
command></
literallayout>
6330N/A <
xi:
include href="common.xml" xpointer='xpointer(//refsection[@name="env"])'/>
6330N/A <
xi:
include href="common.xml" xpointer='xpointer(//refsection[@name="exit-0-gt0"])'/>
6330N/A <
xi:
include href="common.xml" xpointer='xpointer(//refsection[@name="seeAlso"])'/>