[389-users] Fractional Replication - Account Lockout Attributes

[German Parente]

Hi Josh,

passwordLockout is an attribute under "cn=config" which, unfortunately, cannot be replicated.

It's local to the instance. So, you need to configure identically all your nodes the first time.

However, the lockout attributes corresponding to user entry could be replicated. Please, refer to:

https://access.redhat.com/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Managing_Replication-Replicating-Password-Attributes.html

Thanks and regards,

German.

----- Original Message -----
> From: "Joshua Brodie" <josbrodie at gmail.com>
> To: 389-users at lists.fedoraproject.org
> Sent: Friday, 20 February, 2015 11:02:05 PM
> Subject: [389-users] Fractional Replication - Account Lockout Attributes
> 
> Hi Everyone:
> 
> We have started the process to implement account logout - i.e. on 10 times
> with incorrect password, over 10 mins, account locked for 30 mins.
> 
> Services bind to our MMR cluster on the consumers - is it possible to
> replicate the account 'PasswordLockout' via fractional replication to other
> suppliers/consumers (or are the 'PasswordLockout' always local to the
> consumer instance?).
> 
> v 1.2.11.29
> 
> Thanks,
> 
> Josh
> 
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users