Hello all,

We are trying to migrate our LDAP servers from eDirectory to OpenLDAP.

We have replication and replication of pwdaccountlockedtime and pwdfailuretime working.

Our provisioning system (Dell Quest) has trouble filling the pwdaccountlockedtime attribute. The reason for this is that this attribute is not present in the schema.

We use cn = config, so we load ppolicy.ldif. pwdaccountlockedtime is not included in this file.

In ppolicy.schema, pwdaccountlockedtime has been identified, but this is for the slapd.conf variant.

How can we load pwdaccountlockedtime in the schedule using the cn = config method? Can anyone provide us with more information about this?

Thanks in advance!

We are useing openldap-2.4.44.-5.el7.x86_64 - In 2.4.45 pwdaccountlockedtime seems also not included in ppolicy.ldif

Kind regards,

Jacques Loonen

Radboud University Nijmegen - The Netherlands

Met vriendelijke groet,

Jacques Loonen                 http://jloonen.ruhosting.nl/@59B6:7AC1/

-- ICT-Specialist - Radboud Universiteit Nijmegen - http://www.ru.nl/ ICT Servicecentrum - http://www.ru.nl/isc/ Geert Grooteplein-Zuid 41, 6525 GA Nijmegen E-mail: j.loonen@ru.nl mailto:j.loonen@ru.nl - Tel.: +31(0)24-36 17828