mit_samba: Add function for handling bad password count

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Sumit Bose <sbose@redhat.com>
Reviewed-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/source4/kdc/mit_samba.c b/source4/kdc/mit_samba.c
index 05c8061247a63834b1d05072910657f93a464e43..240345dd4c11c9d052af00b0d1b5ba6b2af8a046 100644 (file)
--- a/source4/kdc/mit_samba.c
+++ b/source4/kdc/mit_samba.c
@@ -33,6 +33,7 @@
 #include "kdc/db-glue.h"
 #include "auth/auth.h"
 #include "kdc/kpasswd_glue.h"
+#include "auth/auth_sam.h"
 
 #include "mit_samba.h"
 
@@ -688,3 +689,30 @@ out:
 
        return code;
 }
+
+void mit_samba_zero_bad_password_count(krb5_db_entry *db_entry)
+{
+       struct samba_kdc_entry *p;
+       struct ldb_dn *domain_dn;
+
+       p = (struct samba_kdc_entry *)db_entry->e_data;
+
+       domain_dn = ldb_get_default_basedn(p->kdc_db_ctx->samdb);
+
+       authsam_logon_success_accounting(p->kdc_db_ctx->samdb,
+                                        p->msg,
+                                        domain_dn,
+                                        true);
+}
+
+
+void mit_samba_update_bad_password_count(krb5_db_entry *db_entry)
+{
+       struct samba_kdc_entry *p;
+
+       p = (struct samba_kdc_entry *)db_entry->e_data;
+
+       authsam_update_bad_pwd_count(p->kdc_db_ctx->samdb,
+                                    p->msg,
+                                    ldb_get_default_basedn(p->kdc_db_ctx->samdb));
+}

diff --git a/source4/kdc/mit_samba.h b/source4/kdc/mit_samba.h
index b38bd573db460378051841cb998e19117b8e71b7..277b2e57a9310699c9fbd413a514b5698209e3b2 100644 (file)
--- a/source4/kdc/mit_samba.h
+++ b/source4/kdc/mit_samba.h
@@ -79,4 +79,8 @@ int mit_samba_kpasswd_change_password(struct mit_samba_context *ctx,
                                      char *pwd,
                                      krb5_db_entry *db_entry);
 
+void mit_samba_zero_bad_password_count(krb5_db_entry *db_entry);
+
+void mit_samba_update_bad_password_count(krb5_db_entry *db_entry);
+
 #endif /* _MIT_SAMBA_H */