With user separation enabled, the loginsuccess() call in AIX in session.c is failing, therefore the unsuccessful login count is not being reset to 0 upon successful login. The errno says that it is because we don't have the correct privileges. When we added a loginsuccess() call to auth-passwd.c in the auth_password routine (after the authenticate call) it fixed the problem. Does this sound like an acceptable solution?
Just skimming the code it seems to only affect AIX. So as it sounds like a plan.
*** This bug has been marked as a duplicate of 355 ***
Mass change of RESOLVED bugs to CLOSED