Questions about KDC Lockout Support

2012-07-22 Thread Mike Friedman
Hi, I have some questions about the implementation of KDC lockout support in recent versions of MIT K5. Some things aren't completely clear to me, or aren't addressed at all, in the documentation I have. 1. The docs say that lockout settings for a principal are not replicated. So, if I have a

Re: Questions about KDC Lockout Support

2012-07-22 Thread Greg Hudson
On 07/22/2012 11:51 PM, Mike Friedman wrote: > 1. The docs say that lockout settings for a principal are not > replicated. So, if I have a user who's been locked on the master /and/ > secondary KDCs (presumably the latter would have been done automatically > by the KDC per lockout policy), how wo

Re: Questions about KDC Lockout Support

2012-07-22 Thread Mike Friedman
On 2012-07-22 21:12, Greg Hudson wrote: > On 07/22/2012 11:51 PM, Mike Friedman wrote: >> 1. The docs say that lockout settings for a principal are not >> replicated. So, if I have a user who's been locked on the master /and/ >> secondary KDCs (presumably the latter would have been done automatic