so I did this:
ldapsearch -x -LLL -b cn=Subschema -s base '(objectClass=subschema)' +
which returns all kinds of stuff including pwdAccountLockedTime:
attributeTypes: ( 1.3.6.1.4.1.42.2.27.8.1.17 NAME 'pwdAccountLockedTime'
So it's there but I'm not sure how to set it for a user.
---
Regards,
Kevin Martin
On Mon, Jan 3, 2022 at 2:21 PM kevin martin ktmdms@gmail.com wrote:
# /usr/local/libexec/slapd -VVV @(#) $OpenLDAP: slapd 2.5.7 (Aug 27 2021 21:09:45) $ root@newldap0.mgt.ch3.bmi :/root/openldap-OPENLDAP_REL_ENG_2_5_7/servers/slapd
Included static overlays: accesslog ppolicy seqmod sssvlv syncprov Included static backends: config ldif monitor mdb passwd relay
I'm not sure how exactly to browse the cn=subschema.
Regards,
Kevin Martin
On Mon, Jan 3, 2022 at 11:56 AM Michael Ströder michael@stroeder.com wrote:
On 1/3/22 18:45, kevin martin wrote:
Hmm, module loaded. I'm not doing a moduleload of anything ppolicy related, simply setting the overlay ppolicy, the ppolicy_default, and ppolicy_use_lockout.
Does slapd -VVV list ppolicy module as statically linked module?
If yes, the subschema subentry should contain 'pwdAccountLockedTime'.
Ciao, Michael.