diff options
| -rw-r--r-- | daemons/ipa-kdb/ipa_kdb_principals.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/daemons/ipa-kdb/ipa_kdb_principals.c b/daemons/ipa-kdb/ipa_kdb_principals.c index f0be76ea7..d2be98886 100644 --- a/daemons/ipa-kdb/ipa_kdb_principals.c +++ b/daemons/ipa-kdb/ipa_kdb_principals.c @@ -429,6 +429,10 @@ static krb5_error_code ipadb_parse_ldap_entry(krb5_context kcontext, switch (ret) { case 0: entry->pw_expiration = restime; + + /* If we are using only RADIUS, we don't know expiration. */ + if (ua == IPADB_USER_AUTH_RADIUS) + entry->pw_expiration = 0; case ENOENT: break; default: |