From: Howard Chu <hyc@openldap.org>
Date: Thu, 3 Dec 2015 00:58:33 +0000 (+0000)
Subject: ITS#8327 fix ppolicy_get_default
X-Git-Tag: OPENLDAP_REL_ENG_2_5_0ALPHA~111^2~6
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3a305253a09a637cc86c4941cbadab0c0ca4f2dd;p=thirdparty%2Fopenldap.git

ITS#8327 fix ppolicy_get_default

pwdMaxRecordedFailure must never be zero
---

diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index 58a91cdb9f..e2fc9a5596 100644
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -477,6 +477,8 @@ ppolicy_get_default( PassPolicy *pp )
 
 	/* Users can change their own password by default */
 	pp->pwdAllowUserChange = 1;
+	if ( !pp->pwdMaxRecordedFailure )
+		pp->pwdMaxRecordedFailure = PPOLICY_DEFAULT_MAXRECORDED_FAILURE;
 }