Chapter 6. Operational Attributes and Object Classes

Operational attributes are attributes used to perform directory operations and are available for every entry in the directory, regardless of whether they are defined for the object class of the entry. Operational attributes are only returned in an ldapsearch operation if specifically requested. To return all operational attributes of an object, specify +.
Operational attributes are created and managed by Directory Server on entries, such as the time the entry is created or modified and the creator's name. These attributes can be set on any entry, regardless of other attributes or object classes on the entry.

6.1. accountUnlockTime

The accountUnlockTime attribute contains the date and time in GMT-format at which the account will become unlocked. A value of 0 means that the account must be unlocked by an administrator.
OID 2.16.840.1.113730.3.1.95
Syntax DirectoryString
Multi- or Single-Valued Multi-valued
Defined in Directory Server