Re: [Freeipa-devel] [PATCH] 680 ldap lockout

2011-01-21 Thread Rob Crittenden
Simo Sorce wrote: On Wed, 19 Jan 2011 14:15:05 +0100 Jan Zelený wrote: Rob Crittenden wrote: Rob Crittenden wrote: Jan Zeleny wrote: Rob Crittenden wrote: Update kerberos password policy values on LDAP binds. This is so locked-out accounts in kerberos don't try things using LDAP instead.

Re: [Freeipa-devel] [PATCH] 680 ldap lockout

2011-01-19 Thread Simo Sorce
On Wed, 19 Jan 2011 14:15:05 +0100 Jan Zelený wrote: > Rob Crittenden wrote: > > Rob Crittenden wrote: > > > Jan Zeleny wrote: > > >> Rob Crittenden wrote: > > >>> Update kerberos password policy values on LDAP binds. This is so > > >>> locked-out accounts in kerberos don't try things using LDAP

Re: [Freeipa-devel] [PATCH] 680 ldap lockout

2011-01-19 Thread Jan Zelený
Rob Crittenden wrote: > Rob Crittenden wrote: > > Jan Zeleny wrote: > >> Rob Crittenden wrote: > >>> Update kerberos password policy values on LDAP binds. This is so > >>> locked-out accounts in kerberos don't try things using LDAP instead. > >>> > >>> On a failed bind this will update krbLoginFa

Re: [Freeipa-devel] [PATCH] 680 ldap lockout

2011-01-18 Thread Rob Crittenden
Rob Crittenden wrote: Jan Zeleny wrote: Rob Crittenden wrote: Update kerberos password policy values on LDAP binds. This is so locked-out accounts in kerberos don't try things using LDAP instead. On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth and will potentially f

Re: [Freeipa-devel] [PATCH] 680 ldap lockout

2011-01-18 Thread Rob Crittenden
Jan Zeleny wrote: Rob Crittenden wrote: Update kerberos password policy values on LDAP binds. This is so locked-out accounts in kerberos don't try things using LDAP instead. On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth and will potentially fail the bind altogethe

[Freeipa-devel] [PATCH] 680 ldap lockout

2011-01-17 Thread Rob Crittenden
Update kerberos password policy values on LDAP binds. This is so locked-out accounts in kerberos don't try things using LDAP instead. On a failed bind this will update krbLoginFailedCount and krbLastFailedAuth and will potentially fail the bind altogether. On a successful bind it will zero kr