freeipa.git/daemons/ipa-slapi-plugins/ipa-lockout/Makefile.am, branch ipa-2-1 FreeIPA patches Update kerberos password policy values on LDAP binds. 2011-01-21T18:59:24+00:00 Rob Crittenden rcritten@redhat.com 2011-01-18T19:58:58+00:00 cf9ec1c4271e1f2b35f9a4377550064bad0387c3 On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth and will potentially fail the bind altogether. On a successful bind it will zero krbLoginFailedCount and set krbLastSuccessfulAuth. This will also enforce locked-out accounts. See http://k5wiki.kerberos.org/wiki/Projects/Lockout for details on kerberos lockout. ticket 343 
On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth
and will potentially fail the bind altogether.

On a successful bind it will zero krbLoginFailedCount and set
krbLastSuccessfulAuth.

This will also enforce locked-out accounts.

See http://k5wiki.kerberos.org/wiki/Projects/Lockout for details on
kerberos lockout.

ticket 343