projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3820268) | patch
Fix failure interval of 0 in LDAP lockout code
authorGreg Hudson <ghudson@mit.edu>
Sun, 20 Nov 2011 05:19:45 +0000 (05:19 +0000)
committerGreg Hudson <ghudson@mit.edu>
Sun, 20 Nov 2011 05:19:45 +0000 (05:19 +0000)
commit4a84d4137426d0951d5565adef30efebab719d23
tree7766a40972a4320d3c3408e3d65f2eed9ab237cbtree | snapshot
parent3820268fb7e226be78218b9853723f8d4c9c924acommit | diff
Fix failure interval of 0 in LDAP lockout code

A failure count interval of 0 caused krb5_ldap_lockout_check_policy to
pass the lockout check (but didn't cause a reset of the failure count
in krb5_ldap_lockout_audit).  It should be treated as forever, as in
the DB2 back end.

This bug is the previously unknown cause of the assertion failure
fixed in CVE-2011-1528.

ticket: 7021
target_version: 1.10
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25480 dc483132-0cff-0310-8789-dd5450dbe970
src/kadmin/cli/kadmin.M diff | blob | history
src/plugins/kdb/ldap/libkdb_ldap/lockout.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.