# Use ldapmodify and copy carefully

# 1. Unblock user - set expiration to never:
$ ldapmodify -H 'ldaps://pdc.mycompany.com:636' -D 'cn=Administrator,cn=Users,dc=pdc,dc=pludoni,dc=com' -x -W
Enter LDAP Password:
dn: CN=Firstname Lastname,CN=Users,DC=pdc,DC=pludoni,DC=com
changetype: modify
replace: accountExpires
accountExpires: 9223372036854775807
<Ctrl+D>


# 2. Block user = Expire account:
$ ldapmodify -H 'ldaps://pdc.mycompany.com:636' -D 'cn=Administrator,cn=Users,dc=pdc,dc=pludoni,dc=com' -x -W
Enter LDAP Password:
dn: CN=Firstname Lastname,CN=Users,DC=pdc,DC=pludoni,DC=com
changetype: modify
replace: accountExpires
accountExpires: 131303772000000000
<Ctrl+D>