Jason B. Nance via FreeIPA-users wrote:
> What is the best way to prevent
> the evil bots of the Internet from locking out my admin account?
One simple solution would be to grant another user admin privileges instead of using the
built-in "admin" account.
Yes, any member of the admins group would have the same access.
You can alternatively create a group password policy for the admins
group and set maxfail to 0 to disable account lockout.