Bug 554351

Summary: 1 failed login leads to locked user in AD
Product: [Fedora] Fedora Reporter: Oliver Falk <oliver>
Component: krb5Assignee: Nalin Dahyabhai <nalin>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 12CC: nalin, troels
Target Milestone: ---Keywords: EasyFix, Patch
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: krb5-1.7.1-2.fc12 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2010-02-18 22:26:42 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Oliver Falk 2010-01-11 14:01:06 UTC
I think the following thread + the summary should be self explaining. However, the patch fixes the problem and I think it should be applied:

http://mailman.mit.edu/pipermail/kerberos/2009-October/015375.html

Comment 1 Oliver Falk 2010-01-28 14:44:43 UTC
Nalin...

Yesterday I locked myself out of my workstation, because I updated the kerberos packages a few days before.

Today my colleague was locked out...

It's really not as funny as it might sound. :-/

Comment 2 Troels Arvin 2010-02-03 10:37:26 UTC
Probably a dupe of 542687. I can confirm the problem, by the way.

Comment 3 Nalin Dahyabhai 2010-02-03 17:07:16 UTC
(In reply to comment #1)
> It's really not as funny as it might sound. :-/    

Believe me, I don't laugh at these things.

(In reply to comment #2)
> Probably a dupe of 542687. I can confirm the problem, by the way.    

Yep, it's the same one alright.  It should be fixed in 1.7.1, which I hope to get into updates-testing today.

Comment 4 Fedora Update System 2010-02-03 17:42:34 UTC
krb5-1.7.1-1.fc12 has been submitted as an update for Fedora 12.
http://admin.fedoraproject.org/updates/krb5-1.7.1-1.fc12

Comment 5 Fedora Update System 2010-02-05 01:15:49 UTC
krb5-1.7.1-1.fc12 has been pushed to the Fedora 12 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update krb5'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F12/FEDORA-2010-1416

Comment 6 Fedora Update System 2010-02-16 22:07:46 UTC
krb5-1.7.1-2.fc12 has been submitted as an update for Fedora 12.
http://admin.fedoraproject.org/updates/krb5-1.7.1-2.fc12

Comment 7 Fedora Update System 2010-02-17 07:29:43 UTC
krb5-1.7.1-2.fc12 has been submitted as an update for Fedora 12.
http://admin.fedoraproject.org/updates/krb5-1.7.1-2.fc12

Comment 8 Fedora Update System 2010-02-18 22:26:28 UTC
krb5-1.7.1-2.fc12 has been pushed to the Fedora 12 stable repository.  If problems still persist, please make note of it in this bug report.