From: Howard Chu <hyc@openldap.org>
Date: Thu, 3 Dec 2015 00:58:33 +0000 (+0000)
Subject: ITS#8327 fix ppolicy_get_default
X-Git-Url: https://git.sur5r.net/?a=commitdiff_plain;h=3a305253a09a637cc86c4941cbadab0c0ca4f2dd;p=openldap

ITS#8327 fix ppolicy_get_default

pwdMaxRecordedFailure must never be zero
---

diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index 58a91cdb9f..e2fc9a5596 100644
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -477,6 +477,8 @@ ppolicy_get_default( PassPolicy *pp )
 
 	/* Users can change their own password by default */
 	pp->pwdAllowUserChange = 1;
+	if ( !pp->pwdMaxRecordedFailure )
+		pp->pwdMaxRecordedFailure = PPOLICY_DEFAULT_MAXRECORDED_FAILURE;
 }