[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ppolicy module limited to catching 1 login failure per second?



Paul B. Henson wrote:
> We're testing the ppolicy module for the purposes of enabling account
> lockout on our ldap infrastructure. During initial testing, I noticed
> that it didn't seem to be catching all of the failed logins, and then
> realized that the pwdFailureTime attribute in which they are stored
> seems to have a granularity of only 1 second?

Yes, there's already an ITS present for that:

http://www.openldap.org/its/index.cgi?findid=7161

Ciao, Michael.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature