On 09.08.2016 23:04, Larry Rosen wrote:

This user was locked out due to Max Failure policy = 5

If they’re supposed to be replicas, why the different status?

[root@il10 ~]# ipa user-status  lramey


Account disabled: False


  Server: ipa-idm-01.ipajdr.local

  Failed logins: 0

  Last successful authentication: 20160808191857Z

  Last failed authentication: 20160808191848Z

  Time now: 2016-08-09T19:57:20Z

  Server: ipa-idm-02.ipajdr.local

  Failed logins: 5

  Last successful authentication: 20160809151406Z

  Last failed authentication: 20160809194741Z

  Time now: 2016-08-09T19:57:21Z


Number of entries returned 2


This is not replicated, because it may cause replication storms. So this status is local on each replica

Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project

Reply via email to