pull up r24601 from trunk

[krb5.git] / src / plugins / kdb / ldap / libkdb_ldap / lockout.c

diff --git a/src/plugins/kdb/ldap/libkdb_ldap/lockout.c b/src/plugins/kdb/ldap/libkdb_ldap/lockout.c
index 509c692e67c6edd172878597c391e482822d0b8a..a218dc7e024aa9a56647701ec1c32a409e11b7e5 100644 (file)
--- a/src/plugins/kdb/ldap/libkdb_ldap/lockout.c
+++ b/src/plugins/kdb/ldap/libkdb_ldap/lockout.c
@@ -196,6 +196,7 @@ krb5_ldap_lockout_audit(krb5_context context,
             entry->last_failed <= unlock_time) {
             /* Reset fail_auth_count after administrative unlock. */
             entry->fail_auth_count = 0;
+            entry->mask |= KADM5_FAIL_AUTH_COUNT;
         }
 
         if (failcnt_interval != 0 &&