Add lockout-related performance tuning variables
authorGreg Hudson <ghudson@mit.edu>
Mon, 10 May 2010 22:42:04 +0000 (22:42 +0000)
committerGreg Hudson <ghudson@mit.edu>
Mon, 10 May 2010 22:42:04 +0000 (22:42 +0000)
commit6eacb6d5f29da306ea605a5efb00c0d01c3182b1
tree8b37e7da4e702e962560823515da5a744c5edf7c
parentf795c92a96a2a559fe01fc5906d488167ab6b4b9
Add lockout-related performance tuning variables

The account lockout feature of krb5 1.8 came at a cost in database
accesses for principals requiring preauth, even if lockout is not
used.  Add dbmodules variables disable_last_success and
disable_lockout for the DB2 and LDAP back ends, allowing the admin to
recover the lost performance at the cost of new functionality.

(Unrelated documentation fix: document database_name as a DB2-specific
dbmodules variable instead of the realm variable it used to be.)

ticket: 6719

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24003 dc483132-0cff-0310-8789-dd5450dbe970
doc/admin.texinfo
src/include/k5-int.h
src/plugins/kdb/db2/kdb_db2.c
src/plugins/kdb/db2/kdb_db2.h
src/plugins/kdb/db2/lockout.c
src/plugins/kdb/ldap/libkdb_ldap/kdb_ldap.h
src/plugins/kdb/ldap/libkdb_ldap/ldap_misc.c
src/plugins/kdb/ldap/libkdb_ldap/lockout.c