Displaying the Status of User Accounts
To display the password policy state information for a specific user, use a command similar to the following:
manage-account get-all --targetDN <user-DN>"
--hostname "localhost" --port "4444" --trustAll
--bindDN "cn=manager" --bindPassword admin
Replace <user-DN> with the DN of the user.
Typical output from this command includes the following:
Password Policy DN: cn=Default Password Policy,cn=Password Policies,cn=config
Account Is Disabled: false
Account Expiration Time:
Seconds Until Account Expiration:
Password Changed Time: 20091008144013.142Z
Password Expiration Warned Time:
Seconds Until Password Expiration:
Seconds Until Password Expiration Warning:
Authentication Failure Times:
Seconds Until Authentication Failure Unlock:
Remaining Authentication Failure Count: 3
Last Login Time:Seconds Until Idle Account Lockout:
Password Is Reset: false
Seconds Until Password Reset Lockout:
Grace Login Use Times:
Remaining Grace Login Count: 0
Password Changed by Required Time:
Seconds Until Required Change Time:
Password History:
Depending on your password policy settings, your output may be different than the typical output.