Univention Bugzilla – Attachment 10900 Details for Bug 54317
Setting a user account to locked in UDM still allows OpenLDAP bind with that user