Hi guys,

     We have an issue in the server where the admin (uid=admin,ou=system)
account can get locked
     permanently based on the ppolicy configuration to lock accounts [1].

     IMO we should allow all user and admin accounts to get locked
permanently (again, based on the ppolicy config)
     except the system's built-in admin account (uid=admin,ou=system). This
is just to prevent any abuse involving a
     regular admin account.

     Please suggest if you have any other opinions or suggestions based on
the operations perspective in a production environment.

[1] https://issues.apache.org/jira/browse/DIRSERVER-1812

-- 
Kiran Ayyagari
http://keydap.com

Reply via email to