freeipa.git/daemons/ipa-slapi-plugins/ipa-lockout, branch ad-work

Remove unused variable

2013-07-15T13:40:43+00:00

Remove build warnings

2013-03-29T07:59:36+00:00

Fix rpm build warnings report in Fedora 19 build.

https://fedorahosted.org/freeipa/ticket/3500

Fix lockout of LDAP bind.

2013-03-21T19:44:53+00:00

There were several problems:

- A cut-n-paste error where the wrong value was being considered when
  an account was administratively unlocked.
- An off-by-one error where LDAP got one extra bind attempt.
- krbPwdPolicyReference wasn't being retrieved as a virtual attribute so
  only the global_policy was used.
- The lockout duration wasn't examined in the context of too many failed
  logins so wasn't being applied properly.
- Lockout duration wasn't used properly so a user was effectively unlocked
  when the failure interval expired.
- krbLastFailedAuth and krbLoginFailedCount are no longer updated past
  max failures.

https://fedorahosted.org/freeipa/ticket/3433

ipa-lockout: Wrong sizeof argument in ipa_lockout.c

2013-02-28T11:31:54+00:00

Fixes https://fedorahosted.org/freeipa/ticket/3425

Honor the kdb options disabling KDC writes in ipa_lockout plugin

2012-12-05T15:40:50+00:00

Ther3 are two global ipaConfig options to disable undesirable writes that
have performance impact.

The "KDC:Disable Last Success" will disable writing back to ldap the last
successful AS Request time (successful kinit)

The "KDC:Disable Lockout" will disable completely writing back lockout
related data. This means lockout policies will stop working.

https://fedorahosted.org/freeipa/ticket/2734

Fix typos

2011-09-07T11:20:42+00:00

Fix "The the" and "classses" in FreeIPA code and messages.

https://fedorahosted.org/freeipa/ticket/1480

Fix build warnings

2011-08-26T12:24:48+00:00

Some are actual bugs.

Update kerberos password policy values on LDAP binds.

2011-01-21T18:59:24+00:00

On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth
and will potentially fail the bind altogether.

On a successful bind it will zero krbLoginFailedCount and set
krbLastSuccessfulAuth.

This will also enforce locked-out accounts.

See http://k5wiki.kerberos.org/wiki/Projects/Lockout for details on
kerberos lockout.

ticket 343