Hi Hary, passwordIsGlobalPolicy will allow to have passwordRetryCount, retryCountResetTime, and accountUnlockTime to be replicated from a master to a consumer. Note that if you have read-only consumers in your topology, there's no way that lockout attributes could be propagated in any way to suppliers. Regards, German. ----- Original Message ----- > From: "Hari Mailvaganam" <hari.mailvaganam@xxxxxx> > To: 389-users@xxxxxxxxxxxxxxxxxxxxxxx > Sent: Friday, 20 February, 2015 7:00:52 AM > Subject: PasswordLockout & passwordIsGlobalPolicy > > Hi List: > > in MMR, w.r.t password lockout - is the ' passwordIsGlobalPolicy: on ' only > required on the consumers - i.e. the count replicates among all the > consumers (irrespective on which the bind was made)? Or is it also required > on the suppliers (although bind are not available). > > config --- > > PasswordLockout:on > passwordIsGlobalPolicy: on > > > Thanks. > > -- > 389 users mailing list > 389-users@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/389-users -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users
