1 2 3 4
dn: cn=global_policy,cn=$REALM,cn=kerberos,$SUFFIX replace:krbPwdLockoutDuration:10:600 replace: krbPwdMaxFailure:3:6