!!! Overview
[{$pagename}] is a [Policy Decision Point] used against the attributes in the [pwdPolicy] [objectClass Type] as defined in [Draft-behera-ldap-password-policy] on [How To] determine if a Account is [Locked|Intruder Detection].

A status of __true__ is returned to indicate that the account is locked if any of these conditions are met:
* The value of the [PwdAccountLockedTime] attribute is __000001010000Z__.
* The current time is less than the value of the [PwdStartTime] attribute.
* The current time is greater than or equal to the value of the [PwdEndTime] attribute. 
* The current time is greater than or equal to the value of the [PwdLastSuccess] attribute added to the value of the [pwdMaxIdle] attribute.
* The current time is less than the value of the [pwdAccountLockedTime] attribute added to the value of the [pwdLockoutDuration].

__Otherwise__ a status of false is returned.

!! [EDirectory] [{$pagename}]
We describe the [{$pagename}] for [EDirectory] in detail under [Locked By Intruder].

!! [Microsoft Active Directory] [{$pagename}]
We describe the [{$pagename}] for [Microsoft Active Directory] in detail  under [Active Directory Account Lockout]!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]