Cannot modify no-user-modification attributes: How to update CA DSA operational attributes (dxPwdLastChange)

Products

• CA Directory

Issue/Introduction

When trying to implement the Unlock user, User's password last change time, the following error message is displayed:

 

dxmodify -h HOSTNAME -p PORT -D "cn=myuser,ou=example,dc=com" -w
dn: uid=myuser,ou=example,dc=com
changetype: modify
add: dxPwdLastChange
dxPwdLastChange: 20201007085640.941Z

modifying entry uid=myuser,ou=example,dc=com
ldap_modify: Constraint violation (19)
        additional info: Cannot modify no-user-modification attributes

 

Environment

Directory 14.x

Cause

The dxPwdLastChange is an operational attribute is not supposed to be manipulated manually

Resolution

This is working as designed, no one is supposed to manipulate any operational attributes manually.

Additional Information

There are many other operation attributes. Please see

Operational Attributes

for more details