14.2. 使用命令行配置基于密码的帐户锁定策略

验证

• 尝试绑定使用无效密码两次，超过您在 --pwdmaxfailures 参数中设置的值：

  # ldapsearch -H ldap://server.example.com -D "uid=example,ou=People,dc=example,dc=com" -w invalid-password -b "dc=example,dc=com" -x
  ldap_bind: Invalid credentials (49)
  
  # ldapsearch -H ldap://server.example.com -D "uid=example,ou=People,dc=example,dc=com" -w invalid-password -b "dc=example,dc=com" -x
  ldap_bind: Invalid credentials (49)
  
  # ldapsearch -H ldap://server.example.com -D "uid=example,ou=People,dc=example,dc=com" -w invalid-password -b "dc=example,dc=com" -x
  ldap_bind: Invalid credentials (49)
  
  # ldapsearch -H ldap://server.example.com -D "uid=example,ou=People,dc=example,dc=com" -w invalid-password -b "dc=example,dc=com" -x
  ldap_bind: Constraint violation (19)
          additional info: Exceed password retry limit. Please try later.

  Copy to Clipboard

  启用旧密码后，Directory 服务器在超过限制后锁定帐户，而进一步的尝试将使用 ldap_bind: Constraint violation (19) 错误阻止。