yes, I'm aware of the 2.5.9 comment. is that why I can't use pwdAccountLockedTime or is it simply to get me to the latest patched version?
--- Regards, Kevin Martin On Mon, Jan 3, 2022 at 2:34 PM kevin martin <ktm...@gmail.com> wrote: > so I did this: > > ldapsearch -x -LLL -b cn=Subschema -s base '(objectClass=subschema)' + > > which returns all kinds of stuff including pwdAccountLockedTime: > > attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.17 NAME 'pwdAccountLockedTime' > > So it's there but I'm not sure how to set it for a user. > > --- > > > Regards, > > Kevin Martin > > > On Mon, Jan 3, 2022 at 2:21 PM kevin martin <ktm...@gmail.com> wrote: > >> # /usr/local/libexec/slapd -VVV >> @(#) $OpenLDAP: slapd 2.5.7 (Aug 27 2021 21:09:45) $ >> r...@newldap0.mgt.ch3.bmi >> :/root/openldap-OPENLDAP_REL_ENG_2_5_7/servers/slapd >> >> Included static overlays: >> accesslog >> ppolicy >> seqmod >> sssvlv >> syncprov >> Included static backends: >> config >> ldif >> monitor >> mdb >> passwd >> relay >> >> I'm not sure how exactly to browse the cn=subschema. >> >> --- >> >> >> Regards, >> >> Kevin Martin >> >> >> On Mon, Jan 3, 2022 at 11:56 AM Michael Ströder <mich...@stroeder.com> >> wrote: >> >>> On 1/3/22 18:45, kevin martin wrote: >>> > Hmm, module loaded. I'm not doing a moduleload of anything ppolicy >>> > related, simply setting the overlay ppolicy, the ppolicy_default, and >>> > ppolicy_use_lockout. >>> >>> Does slapd -VVV list ppolicy module as statically linked module? >>> >>> If yes, the subschema subentry should contain 'pwdAccountLockedTime'. >>> >>> Ciao, Michael. >>> >>
