Inactivating Users And Roles; Inactivating User And Roles Using The Console - Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Administrator's Manual

Inactivating Users and Roles

Inactivating Users and Roles
You can temporarily inactivate a single user account or a set of accounts. Once
inactivated, a user cannot bind to the directory. The authentication operation will
fail.
Users and roles are inactivated using the operational attribute
When an entry contains the
server rejects the bind.
You use the same procedures for inactivating users and roles. However, when
you inactivate a role, you are inactivating the members of the role and not the role
entry itself. For more information about roles in general and how roles interact
with access control in particular, refer to chapter 5, "Advanced Entry
Management."
The rest of this section describes the following procedures:
•

Inactivating User and Roles Using the Console

• Inactivating User and Roles Using the Command-Line
• Activating User and Roles Using the Console
• Activating User and Roles Using the Command-Line
CAUTION You cannot inactivate the root entry (the entry corresponding to the
Inactivating User and Roles Using the Console
The following procedure describes inactivating a user or a role using the Console:
In the Directory Server Console, select the Directory tab.
1.
Browse the navigation tree in the left navigation pane, and double-click the
2.
user or role you want to inactivate.
The Edit Entry dialog box appears.
You can also select Inactivate from the Object menu as a short cut.
296 Red Hat Directory Server Administrator's Guide • May 2005
nsAccountLock
root or sub suffix) on a database. For more information on creating
the entry for a root or sub suffix, refer to chapter 2, "Creating
Directory Entries," for more information. For more information on
creating root and sub suffixes, refer to chapter 3, "Configuring
Directory Databases."
nsAccountLock
attribute with a value of
.
, the
true