diff options
| author | Jakub Hrozek <jhrozek@redhat.com> | 2013-02-14 10:13:59 +0100 |
|---|---|---|
| committer | Jakub Hrozek <jhrozek@redhat.com> | 2013-02-22 11:05:58 +0100 |
| commit | e8efc8cc12d2b5d74e92e772c23f13cb09cc5dfb (patch) | |
| tree | 750aa0aa4ce92bc7251cb65a117a79b405acbb44 | |
| parent | 0902a4dc44a2860483f944aa34a1b07cdcfe4ee5 (diff) | |
| download | sssd-e8efc8cc12d2b5d74e92e772c23f13cb09cc5dfb.tar.gz sssd-e8efc8cc12d2b5d74e92e772c23f13cb09cc5dfb.tar.xz sssd-e8efc8cc12d2b5d74e92e772c23f13cb09cc5dfb.zip | |
Fix the krb5 password expiration warning
https://fedorahosted.org/sssd/ticket/1808
| -rw-r--r-- | src/confdb/confdb.c | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/src/confdb/confdb.c b/src/confdb/confdb.c index 6dd03fa3d..fdd4af117 100644 --- a/src/confdb/confdb.c +++ b/src/confdb/confdb.c @@ -1008,7 +1008,11 @@ static int confdb_get_domain_internal(struct confdb_ctx *cdb, goto done; } - /* Set the PAM warning time, if specified */ + /* Set the PAM warning time, if specified. If not specified, pass on + * the "not set" value of "-1" which means "use provider default". The + * value 0 means "always display the warning if server sends one" */ + domain->pwd_expiration_warning = -1; + val = ldb_msg_find_attr_as_int(res->msgs[0], CONFDB_DOMAIN_PWD_EXPIRATION_WARNING, -1); @@ -1023,6 +1027,8 @@ static int confdb_get_domain_internal(struct confdb_ctx *cdb, } if (val > 0) { + DEBUG(SSSDBG_CONF_SETTINGS, + ("Setting domain password expiration warning to %d days\n", val)); /* The value is in days, transform it to seconds */ domain->pwd_expiration_warning = val * 24 * 3600; } |