For review: http://k5wiki.kerberos.org/wiki/Projects/Lockout Note: code is not well tested (in case of LDAP, untested). -- Luke