Hi, Simon. 1. To unlock user you can use web UI to search for her/him, then change its status to "Active" 2. Regarding password expiration, please check [this ticket](https://support.gluu.org/other/2769/expiration-policy-and-password-reset/) Best regards, Alex.

Just one thing to note: Gluu usually doesn't store passwords in its own LDAP directory. Usually user entries are imported from LDAP backend you already have in your network. In such case passwords will not be stored locally (usually), and authentication will happen against that backend. Unless you'll write some application that will be called from your custom script, or implement all steps needed to do that change in your backend directory using LDAP requests in it, it won't be possible for Gluu to change such password.

Hi - I should have added that this was using the embedded OpenDJ instance, not an external directory, so the question still stands.

Sorry - hadn't seen your first part of the response. Thanks. Is there an ETA for version referred to in the expiration/policy ticket?