Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Let U be the user account that is the subject of a change password request.
If U's lockoutTime attribute value plus the attribute value of Effective-LockoutDuration (see section 3.1.1.5) is less than the current time, the server MUST abort the request and return STATUS_ACCOUNT_LOCKED_OUT.
Otherwise, U's lockoutTime MUST be updated to the value 0.