implementing password lockout

[Jim McDonough]

Ok, let me get this straight...you don't see a lockout time in the netlogon
delta?  I think I found one.
      uint32  dw_reserved[4];   /* space for more data - first two seem to
                             be an NTTIME */
Those first two have a time in them that appears to correspond with when I
was locked out.

Also, I found that the lockout reset is not replicated when lockout
duration is in effect...yet the BDC resets it...very interesting.  The BDC
is expected to do this on it's own, apparently.  So the lockout time has to
be communicated somehow (of course, it could just be based on when the
replication occurs that locks it out).

----------------------------
Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

jmcd at us.ibm.com
jmcd at samba.org

Phone: (207) 885-5565
IBM tie-line: 776-9984