mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
s4:kdc: use "msDS-UserPasswordExpiryTimeComputed" instead of samdb_result_force_password_change()
The logic in samdb_result_force_password_change() is incomplete and the correct logic is already available via the constructed "msDS-UserPasswordExpiryTimeComputed" attribute. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11441 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
parent
86b9bf9591
commit
a5efb21a53
@ -880,8 +880,9 @@ static krb5_error_code samba_kdc_message2entry(krb5_context context,
|
||||
|
||||
} else {
|
||||
NTTIME must_change_time
|
||||
= samdb_result_force_password_change(kdc_db_ctx->samdb, mem_ctx,
|
||||
realm_dn, msg);
|
||||
= samdb_result_nttime(msg,
|
||||
"msDS-UserPasswordExpiryTimeComputed",
|
||||
0);
|
||||
if (must_change_time == 0x7FFFFFFFFFFFFFFFULL) {
|
||||
entry_ex->entry.pw_end = NULL;
|
||||
} else {
|
||||
|
Loading…
Reference in New Issue
Block a user