Re: Locking of principales due to unsuccessfull attempts

[Gedaliah Wolosh <gwolosh@njit.edu>]

Has there been any movement on this? We would very much like to have
this ability.

Gedaliah Wolosh
University Computing Systems

---------- Forwarded message ----------
Date: Wed, 8 Jun 2005 23:12:52 +1000
From: Luke Howard <lukeh@PADL.COM>
To: ahaupt@ifh.de
Cc: feiler@uni-hohenheim.de, heimdal-discuss@sics.se, mack@uni-hohenheim.de
Subject: Re: Locking of principales  due to unsuccessfull attempts




>Well, years ago, I asked the same question. That time I was told that the
>current database model does not support account locking (but Love and
>Johan will probably know better...).

For our XAD identity server, which supports account locking, we added
an auditing code path to the Heimdal KDC. I mentioned it to Love some
time ago, I'm happy to commit it once approved.

-- Luke

--