LDAP-UX Client Services B.04.10 Administrator's Guide (edition 7)

Table 5-3 Security Policy Status Attributes (continued)
This string attribute defines a date and time when a
password is considered expired. The data and time are
specified using the “Generalize Time” syntax as
referenced in RFC 2252 and specified by the ISO x.208
standard. It uses the format YYYYMMDDHHMMSSTZ,
where YYYY= 4 difit year, MM= 2 digit month, DD=2 digit
day, HH=2 digit hour, MM=2 digit minute, SS=2 digit
second and TZ=tme zone. In LDAP directory servers, they
use the GMT time zone which is represented with the
letter Z for Zone time. For example, 20060215165535Z
represents February 15, 2006 at 16:55 and 35 seconds GMT.
passwordExpirationTime
This string attribute defines a date and time when an
account will be unlocked. The value is represented in the
Generalized Time syntax described in the
“passwordExpirationTime” attribute. If the attribute
does not exist, the account is considered unlocked
(assuming nsAccountLock does not also exist).
accountUnlockTime
This variable defines the location of the new password
policy. The location is expressed in the DN format.
pwdpolicysubentry
114 Administering LDAP-UX Client Services