Re: ITS #7161, ppolicy pwdFailureTime resolution should be better than 1 second

[Christian Kratzer <ck-lists@cksoft.de>]

Hi,

On Sat, 24 May 2014, Michael StrÃder wrote:

> Howard Chu wrote:
> > You need to actually use microseconds, since the time-increment is only unique
> > on the local server and will not guarantee uniqueness in a replication scenario.
>
> 'pwdFailureTime' gets replicated?

ist does if you configure ppolicy_forward_updates (olcPPolicyForwardUpdates):

       ppolicy_forward_updates
              Specify that policy state changes that result from Bind operations (such as recording failures, lockout,
              etc.) on a consumer should be forwarded to a master instead of being  written  directly  into  the  con-
              sumerâs  local  database.  This  setting is only useful on a replication consumer, and also requires the
              updateref setting and chain overlay to be appropriately configured.


Greetings
Christian

--
Christian Kratzer                   CK Software GmbH
Email:   ck@cksoft.de               Wildberger Weg 24/2
Phone:   +49 7032 893 997 - 0       D-71126 Gaeufelden
Fax:     +49 7032 893 997 - 9       HRB 245288, Amtsgericht Stuttgart
Mobile:  +49 171 1947 843           Geschaeftsfuehrer: Christian Kratzer
Web:     http://www.cksoft.de/