svn rev #24601: trunk/src/plugins/kdb/ldap/libkdb_ldap/

[ghudson@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=24601
Commit By: ghudson
Log Message:
ticket: 6849
subject: Fix edge case in LDAP last_admin_unlock processing
target_version: 1.9.1
tags: pullup

In the LDAP KDB module, set appropriate flags when zeroing
entry->fail_auth_count due to an administrative unlock.



Changed Files:
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/lockout.c
Modified: trunk/src/plugins/kdb/ldap/libkdb_ldap/lockout.c
===================================================================
--- trunk/src/plugins/kdb/ldap/libkdb_ldap/lockout.c	2011-01-19 16:49:41 UTC (rev 24600)
+++ trunk/src/plugins/kdb/ldap/libkdb_ldap/lockout.c	2011-01-21 05:00:53 UTC (rev 24601)
@@ -196,6 +196,7 @@
             entry->last_failed <= unlock_time) {
             /* Reset fail_auth_count after administrative unlock. */
             entry->fail_auth_count = 0;
+            entry->mask |= KADM5_FAIL_AUTH_COUNT;
         }
 
         if (failcnt_interval != 0 &&