I just discovered the ns-activate/inactivate/accountstatus.pl scripts but I can't seem to get them to work. I've tried a bunch of different combinations along these lines -- s-accountstatus.pl -D "cn=Directory Manager" -w password -p 389 -h myldapserver -I cn=ejtest,ou=Deactivated Accts,ou=People,dc=mycompany,dc=com ns-accountstatus.pl -D Directory Manager -w password -p 389 -h myldapserver -I cn=ejtest,ou=Deactivated Accts,ou=People,dc=mycompany,dc=com ns-accountstatus.pl -D "cn=Directory Manager" -w password -p 389 -h myldapserver -I "cn=ejtest,ou=Deactivated Accts,ou=People,dc=mycompany,dc=com" ns-accountstatus.pl -D Directory Manager -w password -p 389 -h myldapserver -I "cn=ejtest,ou=Deactivated Accts,ou=People,dc=mycompany,dc=com" basically with and without "" and with and without cn=, but every combination I've tried it only returns the help menu back to me. I looked up the ldapsearch commands that it is using, this seems to be the accountstatus command: $ldapsearch -p $port -h $host -D \"$rootdn\" -w \"$rootpw\" -s base -b \"$entry\" \"(objectclass=*)\" nsaccountlock It looks pretty basic, but I can't figure out why it won't work for me. Are others able to get this working? thanks - EJ -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users