Using DMS API in Java and doing User Change Password. User does not get disabled after the maximum incorrect passwords allowed by the Password Policy. Bad password count is being updated in the User Directory (AD) attribute.
All versions of SDK, DMS API.
Non-admin user should be used to initialize the DMS API and call the login() method.
This would require to use a non-admin user to do a login() method call and use that to initialize the DMS API, instead of the admin user and password. So basically, in the login () call you would use an end user's id/password instead of the admin user id/password. The example is the sample DMSApiSample.java that comes with SDK installation.