I have a three-node-cluster (SLES10SP1 / OES2 x96_64) ...
Things run fine - but from time to time
admin's account is locked because of intruder lockout.
In C1 i just can see that this happened from one of my cluster nodes.
It's always the same IP address (one of my cluster nodes) - it's also
the one that's running a DS replica. The other two nodes do not have a
I have no idea what's causing the lockouts - sometimes it takes 2..3
days until the account is locked - in some cases it is locked after 1..2
How can i find the reason for it?

Thanx M.