[PATCH] bad password lock

[Jeremy Allison]

On Thu, Sep 18, 2003 at 04:31:00PM +0200, Aurélien Degrémont wrote:
> Andrew Bartlett wrote:
> 
> > The main problem with this patch is the change to the DB format string -
> > you break every TDBsam installation out there.
> 
> Hi,
> 
> Thanks to Richard, we have (nearly sure) found out where and how 
> informations concerning 'logon count' field,'bad pwd count' field and 
> 'lockout duration' implementation are.
> 
> But, to implement all of this, we need to store the bad pwd count and a 
> lockout time. Bad pwd count is included in the unknown5 field of SAM 
> ACOOUNT struct, so that's ok. But, the lockout time is not available in 
> it, in any of the unknown fields of this structure. So, how store it if 
> we cannot modify the structure length (I understand why we must not)

We can store this in an external record - doesn't have to be attached
to the user record.

Jeremy.