Given that pwdMaxFailures=0 disables lockout, pwdLockout is not only redundant but adds unnecessarily complexity to both servers and management clients. I recommend it be axed. -- Kurt _______________________________________________ Ldapext mailing list Ldapext@ietf.org https://www.ietf.org/mailman/listinfo/ldapext