diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2013-11-06 10:39:42 +1300 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2014-04-02 17:12:46 +0200 |
| commit | 3f07737fd4a92fc948cfc432bc46098d6dd5269a (patch) | |
| tree | 9fb99bf3cad568fe51ad3d6cbeeba83718462223 /source4/auth/ntlm | |
| parent | a0de9290099a93413048a03740cfb04ca1355c78 (diff) | |
| download | samba-3f07737fd4a92fc948cfc432bc46098d6dd5269a.tar.gz samba-3f07737fd4a92fc948cfc432bc46098d6dd5269a.tar.xz samba-3f07737fd4a92fc948cfc432bc46098d6dd5269a.zip | |
s4:auth: Add password lockout support to the AD DC
Including a fix by Arvid Requate <requate@univention.de>
Change-Id: I25d10da50dd6119801cd37349cce970599531c6b
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source4/auth/ntlm')
| -rw-r--r-- | source4/auth/ntlm/auth_sam.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/source4/auth/ntlm/auth_sam.c b/source4/auth/ntlm/auth_sam.c index d07f9301fb..8f7f5448e8 100644 --- a/source4/auth/ntlm/auth_sam.c +++ b/source4/auth/ntlm/auth_sam.c @@ -213,6 +213,13 @@ static NTSTATUS authsam_authenticate(struct auth4_context *auth_context, nt_status = authsam_password_ok(auth_context, mem_ctx, acct_flags, lm_pwd, nt_pwd, user_info, user_sess_key, lm_sess_key); + if (NT_STATUS_EQUAL(nt_status, NT_STATUS_WRONG_PASSWORD)) { + NTSTATUS update_bad_pwd_count_status = authsam_update_bad_pwd_count(auth_context->sam_ctx, msg, domain_dn); + if (!NT_STATUS_IS_OK(update_bad_pwd_count_status)) { + /* bo! (what can we do here? */ + } + } + NT_STATUS_NOT_OK_RETURN(nt_status); nt_status = authsam_account_ok(mem_ctx, auth_context->sam_ctx, |