On Sat, May 24, 2014 at 10:56:50AM +0200, Michael Ströder wrote: > > 'pwdFailureTime' gets replicated? Based on my testing, in a multimaster environment, that attribute is indeed replicated. For account lockout purposes, that's required if you want the failure count to be across all servers and not relative to each one...