Security Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

ctscUserAuxClass and user account lockout

2727882Jun 30 2016 — edited Jul 4 2016

Hey,

The version we are using is DSEE 11

We have a service account, which supposed not to be lockedout and expired. However, in the ldap log, we do find the lockout.

Check the schema for that account, and find 3 special objectclasses along with their attributes

ObjectClass:

objectclass: napPassportUser

objectclass: ctscUserAuxClass

objectclass: napUserChallengeResponse

Attrributes:

ctscaccountenddate: 33331230000000Z

ctscaccountstartdate: 20151101110138Z

ctscfailedlogincount: 0

ctsclastresetdate: 20151101110139Z

ctsclockoutexpirationdate: 20151101110139Z

ctscpasswordcreationdate: 20151101110139Z

ctscpasswordexpirationdate: 40140704110139Z

ctscpasswordhistory: {SSHA}********

ctscuserkeywords: NotExpired

ctscuserkeywords: PasswordPolicy

So in this case, the account is controlled by the above attributes? Are those attributes system controlled and make the account locked out?

Thanks,

Shelly

Locked Post

New comments cannot be posted to this locked post.

Locked on Aug 1 2016

Added on Jun 30 2016

#identity-management, #oracle-unified-directory-oud-oracle-directory-server-enterprise-edition-sun-dsee

1 comment

686 views