14.2. 使用命令行配置基于密码的帐户锁定策略

验证

• 尝试绑定使用无效密码两次，超过您在 --pwdmaxfailures 参数中设置的值：

  # ldapsearch -H ldap://server.example.com -D "uid=example,ou=People,dc=example,dc=com" -w invalid-password -b "dc=example,dc=com" -x
  ldap_bind: Invalid credentials (49)
  
  # ldapsearch -H ldap://server.example.com -D "uid=example,ou=People,dc=example,dc=com" -w invalid-password -b "dc=example,dc=com" -x
  ldap_bind: Invalid credentials (49)
  
  # ldapsearch -H ldap://server.example.com -D "uid=example,ou=People,dc=example,dc=com" -w invalid-password -b "dc=example,dc=com" -x
  ldap_bind: Invalid credentials (49)
  
  # ldapsearch -H ldap://server.example.com -D "uid=example,ou=People,dc=example,dc=com" -w invalid-password -b "dc=example,dc=com" -x
  ldap_bind: Constraint violation (19)
          additional info: Exceed password retry limit. Please try later.

  启用旧密码后，Directory 服务器会在超过限制后锁定帐户，并进一步尝试使用 ldap_bind: Constraint violation (19) ）错误阻止帐户。