[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ppolicy password lockout

To: discip@pjm.com
Subject: Re: ppolicy password lockout
From: Andrew Findlay <andrew.findlay@skills-1st.co.uk>
Date: Thu, 14 Aug 2008 19:45:35 +0100
Cc: openldap-software@openldap.org
Content-disposition: inline
In-reply-to: <AE7CB56C86F9C6408268333BB7A29D69012676EA@EXC13VWP.corp.ds.pjm.com>
References: <AE7CB56C86F9C6408268333BB7A29D69012676EA@EXC13VWP.corp.ds.pjm.com>
User-agent: Mutt/1.5.13 (2006-08-11)

On Thu, Aug 14, 2008 at 07:58:44AM -0400, discip@pjm.com wrote:

>   I don't see any pwdFailureTime attributes ever show up for the user in
> question, and the password never locks after bad password attempts.

When reading the user entry are you requesting the operational attributes?
You need to do that to see things like failure times.
Add '+' to the end of the ldapsearch command and see what you get.

Andrew
-- 
-----------------------------------------------------------------------
|                 From Andrew Findlay, Skills 1st Ltd                 |
| Consultant in large-scale systems, networks, and directory services |
|     http://www.skills-1st.co.uk/                +44 1628 782565     |
-----------------------------------------------------------------------

Follow-Ups:
- RE: [Probable SPAM] Re: ppolicy password lockout
  - From: <discip@pjm.com>
- Re: ppolicy password lockout
  - From: <discip@pjm.com>

References:
- ppolicy password lockout
  - From: <discip@pjm.com>

Prev by Date: Re: Building OpenLDAP for Windows
Next by Date: LDAP Replication +TLS +Self-signed certificate.
Index(es):
- Chronological
- Thread