On 09.08.2016 23:04, Larry Rosen wrote:

This user was locked out due to Max Failure policy = 5

If they’re supposed to be replicas, why the different status?

[root@il10 ~]# ipa user-status  lramey

-----------------------

Account disabled: False

-----------------------

  Server: ipa-idm-01.ipajdr.local

  Failed logins: 0

  Last successful authentication: 20160808191857Z

  Last failed authentication: 20160808191848Z

  Time now: 2016-08-09T19:57:20Z

  Server: ipa-idm-02.ipajdr.local

  Failed logins: 5

  Last successful authentication: 20160809151406Z

  Last failed authentication: 20160809194741Z

  Time now: 2016-08-09T19:57:21Z

----------------------------

Number of entries returned 2



Hi,

This is not replicated, because it may cause replication storms. So this status is local on each replica

Martin^2
-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to