sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-21 18:04:06 +03:00
Code

s4:dsdb: Add a note that administrators should not set the clock too far in the future

Browse Source 
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Jo Sutton 2024-04-16 13:58:15 +12:00 committed by Jo Sutton
parent a397029813
commit dcc5724ed7
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
source4/dsdb/gmsa/util.c
View File

@ -1180,6 +1180,12 @@ int gmsa_recalculate_managed_pwd(TALLOC_CTX *mem_ctx,
* the keys.
*/
/*
* Administrators should be careful not to set a DC’s clock too far in
* the future, or a gMSA’s keys may be stuck at that future time and
* stop updating until said time rolls around for real.
*/
current_key_is_valid = pwd_id != NULL &&
current_time < current_key_expiration_time;
if (current_key_is_valid) {