ITS#8327 fix ppolicy_get_default

pwdMaxRecordedFailure must never be zero

diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index 9870e8f073b7e5f5ffe17f58c4a41c88ebaa46da..c7a72d75389c13176c26f2ab7e9e7108ce8488d2 100644 (file)
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -473,6 +473,8 @@ ppolicy_get_default( PassPolicy *pp )
 
        /* Users can change their own password by default */
        pp->pwdAllowUserChange = 1;
+       if ( !pp->pwdMaxRecordedFailure )
+               pp->pwdMaxRecordedFailure = PPOLICY_DEFAULT_MAXRECORDED_FAILURE;
 }