Prevent admin user lock

[Petar Kozić]

Hi folks,

My free iPA server works on public IP and need to be public. Because of
that I have problem because admin user is often locked becuase too many
incorrect logins.
Can I filter admin user login to some IP and how?

Thank you.

[Alexander Bokovoy]

On ke, 29 huhti 2020, Petar Kozić via FreeIPA-users wrote:
> Hi folks,
>
> My free iPA server works on public IP and need to be public. Because of
> that I have problem because admin user is often locked becuase too many
> incorrect logins.
> Can I filter admin user login to some IP and how?

You can create a password policy specifically to admin user that would
make the user non-lockable.

[Petar Kozić]

Hi Alexander, thank you for your reply, can you point some details how can
I do that?

On Wed, Apr 29, 2020, 15:48 Alexander Bokovoy  wrote:
> On ke, 29 huhti 2020, Petar Kozić via FreeIPA-users wrote:
> > Hi folks,
> >
> > My free iPA server works on public IP and need to be public. Because of
> > that I have problem because admin user is often locked becuase too many
> > incorrect logins.
> > Can I filter admin user login to some IP and how?
>
> You can create a password policy specifically to admin user that would
> make the user non-lockable.
>
> --
> / Alexander Bokovoy
> Sr. Principal Software Engineer
> Security / Identity Management Engineering
> Red Hat Limited, Finland

[Alexander Bokovoy]

On ke, 29 huhti 2020, Petar Kozić via FreeIPA-users wrote:
> Hi Alexander, thank you for your reply, can you point some details how can
> I do that?

See 'ipa help pwpolicy' and official documentation chapter 'Definiting
IdM password policies':
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/htm...

Just set max failures to 0.