diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2011-01-18 14:58:58 -0500 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2011-01-21 13:59:24 -0500 |
| commit | cf9ec1c4271e1f2b35f9a4377550064bad0387c3 (patch) | |
| tree | 5f586544af7a8ca1f701d182d1584374b864d27b /ipa.spec.in | |
| parent | 4361cd02422d8a6b30d67bb6869af9c67f7ec9c0 (diff) | |
| download | freeipa-cf9ec1c4271e1f2b35f9a4377550064bad0387c3.tar.gz freeipa-cf9ec1c4271e1f2b35f9a4377550064bad0387c3.tar.xz freeipa-cf9ec1c4271e1f2b35f9a4377550064bad0387c3.zip | |
Update kerberos password policy values on LDAP binds.
On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth
and will potentially fail the bind altogether.
On a successful bind it will zero krbLoginFailedCount and set
krbLastSuccessfulAuth.
This will also enforce locked-out accounts.
See http://k5wiki.kerberos.org/wiki/Projects/Lockout for details on
kerberos lockout.
ticket 343
Diffstat (limited to 'ipa.spec.in')
| -rw-r--r-- | ipa.spec.in | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/ipa.spec.in b/ipa.spec.in index d43a029c4..7d7ce7787 100644 --- a/ipa.spec.in +++ b/ipa.spec.in @@ -235,6 +235,7 @@ rm %{buildroot}/%{plugin_dir}/libipa_winsync.la rm %{buildroot}/%{plugin_dir}/libipa_repl_version.la rm %{buildroot}/%{plugin_dir}/libipa_uuid.la rm %{buildroot}/%{plugin_dir}/libipa_modrdn.la +rm %{buildroot}/%{plugin_dir}/libipa_lockout.la # Some user-modifiable HTML files are provided. Move these to /etc # and link back. @@ -392,6 +393,7 @@ fi %attr(755,root,root) %{plugin_dir}/libipa_repl_version.so %attr(755,root,root) %{plugin_dir}/libipa_uuid.so %attr(755,root,root) %{plugin_dir}/libipa_modrdn.so +%attr(755,root,root) %{plugin_dir}/libipa_lockout.so %dir %{_localstatedir}/lib/ipa %attr(700,root,root) %dir %{_localstatedir}/lib/ipa/sysrestore %dir %{_localstatedir}/cache/ipa |