Re: Ppolicy does not seem to work

2011-02-17 Thread Jan Kohnert
Andrew Findlay schrieb: On Wed, Feb 16, 2011 at 12:58:48PM +0100, Jan Kohnert wrote: I assume that you are talking about setting pwdAccountLockedTime to 0101Z which is what I have generally done in these situations. This is exactly what I was looking for. Did I overread why

Re: Ppolicy does not seem to work

2011-02-16 Thread Jan Kohnert
Andrew Findlay schrieb: On Mon, Feb 14, 2011 at 02:23:30PM -0800, Howard Chu wrote: Jan Kohnert wrote: So there comes the next question: Is there a way to lock out specific users permanently (other than creating a cronjob setting the lockout time new after 900s) or do I need to set

Re: Ppolicy does not seem to work

2011-02-15 Thread Andrew Findlay
On Mon, Feb 14, 2011 at 02:23:30PM -0800, Howard Chu wrote: Jan Kohnert wrote: So there comes the next question: Is there a way to lock out specific users permanently (other than creating a cronjob setting the lockout time new after 900s) or do I need to set pwdLockoutDuration to inf and so

Ppolicy does not seem to work

2011-02-14 Thread Jan Kohnert
Hi there, I'm new to this list, so first of all welcome to everyone. I have a problem with ppolicy and got stuck finding a solution. I configured slapd using the information from [1] trying to be able to lock users. But anyway, the lock seems to be ignored: As soon as one tries to log in, the

Re: Ppolicy does not seem to work

2011-02-14 Thread Clément OUDOT
2011/2/13 Jan Kohnert nospam001-li...@jankoh.dyndns.org: Hi there, I'm new to this list, so first of all welcome to everyone. I have a problem with ppolicy and got stuck finding a solution. I configured slapd using the information from [1] trying to be able to lock users. But anyway, the

Re: Ppolicy does not seem to work

2011-02-14 Thread Jan Kohnert
Hello, Clément OUDOT schrieb: 2011/2/13 Jan Kohnert nospam001-li...@yyy.zzz.org: I have a problem with ppolicy and got stuck finding a solution. I configured slapd using the information from [1] trying to be able to lock users. But anyway, the lock seems to be ignored: As soon as one

Re: Ppolicy does not seem to work

2011-02-14 Thread Jan Kohnert
Jan Kohnert schrieb: I have a problem with ppolicy and got stuck finding a solution. I configured slapd using the information from [1] trying to be able to lock users. But anyway, the lock seems to be ignored: As soon as one tries to log in, the pwdLockedTime agument es removed from the entry

Re: Ppolicy does not seem to work

2011-02-14 Thread Howard Chu
Jan Kohnert wrote: So there comes the next question: Is there a way to lock out specific users permanently (other than creating a cronjob setting the lockout time new after 900s) or do I need to set pwdLockoutDuration to inf and so are forced to manually reset users whose accounts were tried to