dsdb/rpc: Update effective badPwdCount to use PSO settings
authorTim Beale <timbeale@catalyst.net.nz>
Tue, 10 Apr 2018 22:33:21 +0000 (10:33 +1200)
committerGarming Sam <garming@samba.org>
Wed, 23 May 2018 04:55:30 +0000 (06:55 +0200)
commit706070274da9054bd0fbd7732b8304dee1d30f20
tree62bf6f2727d2d82f903f30a8746c0a96b1e0f1c0
parent5246d480b1e3aba4921b27293f2573bbee380570
dsdb/rpc: Update effective badPwdCount to use PSO settings

The lockOutObservationWindow is used to calculate the badPwdCount. When
a PSO applies to a user, we want to use the PSO's lockout-observation
window rather the the default domain setting.

This is finally enough to get some of the PSO password_lockout tests
to pass.

Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
selftest/knownfail.d/password_lockout
source4/dsdb/common/util.c
source4/rpc_server/samr/dcesrv_samr.c