Re: Distributed ppolicy state

2009-10-24 Thread Volker Lendecke
On Fri, Oct 23, 2009 at 02:15:40PM -0700, Howard Chu wrote: > I'm not sure you're trying to solve the right problem yet. I'm pretty > unconvinced that account lockout is a good solution to anything, in > general. That's why I added login rate control to the latest ppolicy draft, > where the DSA

Re: Distributed ppolicy state

2009-10-23 Thread Howard Chu
Volker Lendecke wrote: On Fri, Oct 23, 2009 at 02:15:40PM -0700, Howard Chu wrote: I'm not sure you're trying to solve the right problem yet. I'm pretty unconvinced that account lockout is a good solution to anything, in general. That's why I added login rate control to the latest ppolicy draft,

Re: Distributed ppolicy state

2009-10-23 Thread Howard Chu
Brett @Google wrote: On Thu, Oct 22, 2009 at 5:44 PM, Howard Chu mailto:h...@symas.com>> wrote: In the case of a local, load-balanced cluster of replicas, where the network latency between DSAs is very low, the natural coalescing of updates may not occur as often. Still, it would be

Re: Distributed ppolicy state

2009-10-22 Thread Brett @Google
On Thu, Oct 22, 2009 at 5:44 PM, Howard Chu wrote: > In the case of a local, load-balanced cluster of replicas, where the > network latency between DSAs is very low, the natural coalescing of updates > may not occur as often. Still, it would be better if the updates didn't > happen at all. And in