Hide Forgot
The Linux Domain Identity guide documents unlocking a user account (ipa user-unlock), but not locking it or checking if the user is locked. We should document ipa user-lock and ipa user-status (shows whether the user is locked).
To disable a user account, ipa user-disable is used; ipa user-lock (mentioned in comment#0) does not exist. Documentation for ipa user-status has been added.
The update is available on the Customer Portal.