Exclude an user from account lockout

abhi_kum · 10-05-2010, 07:01 AM

Hi,

I am using Red Hat LDAP (version 3) and I have passwordLockout set as "on" at global level. Is there a way to disable account lockout for a specific user?

Thanks..

frndrfoe · 10-05-2010, 08:24 AM

Quote:

Originally Posted by abhi_kum

I have passwordLockout set as "on" at global level.

Do you mean that everyone has a pwdPolicySubentry entry that points to a policy that has passwordLockout=on?

If that's the case you could remove the pwdPolicySubentry entry for that particular user, or set up another policy for users of this type.

I think you are able to add the pwdpolicy object class to that user's DN and override the passwordLockout attribute by having it set within the user DN.