[krbdev.mit.edu #6718] SVN Commit

[Greg Hudson via RT]

In krb5_ldap_put_principal, use krb5_get_attributes_mask to determine
whether krbLoginFailedCount existed on the entry when it was
retrieved.  If it didn't exist, don't try to use LDAP_MOD_INCREMENT,
and don't assert an old value when not using LDAP_MOD_INCREMENT.

Also, create the krbLoginFailedCount attribute when creating new
entries.  This allows us to use LDAP_MOD_INCREMENT during the first
failed login (if the server supports it), avoiding a race condition.


http://src.mit.edu/fisheye/changelog/krb5/?cs=24002
Commit By: ghudson
Revision: 24002
Changed Files:
U   trunk/src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c