LDAP Users Do Not Disable

Symptom:

Password policies do not disable LDAP users.

Solution:

Check the following:

The LDAP directory to which the policy is bound is writable. You must be able to save passwords in each user's record in the LDAP directory.
The user directory setting is valid for password attribute, password data, and disable flag user profile attributes. More information on configuring the password attribute, password data, and disabled flag user profile attributes exists in Specify Directory Attributes.