Ticket History #6718: Make KADM5_FAIL_AUTH_COUNT

# Mon May 10 18:23:58 2010 ghudson@mit.edu (Greg Hudson) - Ticket created

From:	ghudson@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 659B

In krb5_ldap_put_principal, use krb5_get_attributes_mask to determine
whether krbLoginFailedCount existed on the entry when it was
retrieved. If it didn't exist, don't try to use LDAP_MOD_INCREMENT,
and don't assert an old value when not using LDAP_MOD_INCREMENT.

Also, create the krbLoginFailedCount attribute when creating new
entries. This allows us to use LDAP_MOD_INCREMENT during the first
failed login (if the server supports it), avoiding a race condition.

https://github.com/krb5/krb5/commit/f795c92a96a2a559fe01fc5906d488167ab6b4b9
Commit By: ghudson
Revision: 24002
Changed Files:
U trunk/src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

# Mon May 10 18:23:58 2010 ghudson@mit.edu (Greg Hudson) - Requestor ghudson@mit.edu (Greg Hudson) added

# Mon May 10 18:23:58 2010 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'review'

# Mon May 10 18:23:58 2010 ghudson@mit.edu (Greg Hudson) - Tags pullup added

# Mon May 10 18:23:58 2010 ghudson@mit.edu (Greg Hudson) - Target_Version 1.8.2 added

# Wed May 19 14:52:47 2010 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'

# Wed May 19 14:52:47 2010 tlyu (Taylor Yu) - Version_Fixed 1.8.2 added

# Wed May 19 14:52:47 2010 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 973B

pull up r24002 from trunk

------------------------------------------------------------------------
r24002 | ghudson | 2010-05-10 18:23:57 -0400 (Mon, 10 May 2010) | 14 lines

ticket: 6718
subject: Make KADM5_FAIL_AUTH_COUNT_INCREMENT more robust with LDAP
target_version: 1.8.2
tags: pullup

In krb5_ldap_put_principal, use krb5_get_attributes_mask to determine
whether krbLoginFailedCount existed on the entry when it was
retrieved. If it didn't exist, don't try to use LDAP_MOD_INCREMENT,
and don't assert an old value when not using LDAP_MOD_INCREMENT.

Also, create the krbLoginFailedCount attribute when creating new
entries. This allows us to use LDAP_MOD_INCREMENT during the first
failed login (if the server supports it), avoiding a race condition.

https://github.com/krb5/krb5/commit/495bd381837c3dbde0ef88cdbc1fc0ee99ac596b
Commit By: tlyu
Revision: 24061
Changed Files:
U branches/krb5-1-8/src/plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

# Wed Dec 16 18:02:55 2015 tlyu (Taylor Yu) - CustomField pullup deleted

Ticket History #6718: Make KADM5_FAIL_AUTH_COUNT_INCREMENT more robust with LDAP