Exclude passwordgraceusertime from replication

Treat this like other failed login attributes and don't
replicate them.

https://pagure.io/freeipa/issue/1539

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
This commit is contained in:
Rob Crittenden 2022-05-02 11:53:47 -04:00 committed by Alexander Bokovoy
parent 2d5e693514
commit aefa5f2252

View File

@ -64,9 +64,10 @@ WINSYNC = 2
# List of attributes that need to be excluded from replication initialization. # List of attributes that need to be excluded from replication initialization.
TOTAL_EXCLUDES = ('entryusn', TOTAL_EXCLUDES = ('entryusn',
'krblastsuccessfulauth', 'krblastsuccessfulauth',
'krblastfailedauth', 'krblastfailedauth',
'krbloginfailedcount') 'krbloginfailedcount',
'passwordgraceusertime',)
# List of attributes that need to be excluded from normal replication. # List of attributes that need to be excluded from normal replication.
EXCLUDES = ('memberof', 'idnssoaserial') + TOTAL_EXCLUDES EXCLUDES = ('memberof', 'idnssoaserial') + TOTAL_EXCLUDES