From 13ec767e6ca3e435e119f1f07bda10eb213383f6 Mon Sep 17 00:00:00 2001 From: Pavel Reichl Date: Tue, 20 Jan 2015 18:34:44 -0500 Subject: SDAP: Lock out ssh keys when account naturally expires MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Resolves: https://fedorahosted.org/sssd/ticket/2534 Reviewed-by: Lukáš Slebodník Reviewed-by: Jakub Hrozek --- src/providers/ldap/sdap_access.h | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src/providers/ldap/sdap_access.h') diff --git a/src/providers/ldap/sdap_access.h b/src/providers/ldap/sdap_access.h index a8c663910..6e637be56 100644 --- a/src/providers/ldap/sdap_access.h +++ b/src/providers/ldap/sdap_access.h @@ -35,6 +35,7 @@ #define SYSDB_LDAP_ACCESS_CACHED_LOCKOUT "ldap_access_lockout_allow" /* names of ppolicy attributes */ #define SYSDB_LDAP_ACCESS_LOCKED_TIME "pwdAccountLockedTime" +#define SYSDB_LDAP_ACESS_LOCKOUT_DURATION "pwdLockoutDuration" #define SYSDB_LDAP_ACCESS_LOCKOUT "pwdLockout" #define LDAP_ACCESS_FILTER_NAME "filter" @@ -45,6 +46,7 @@ #define LDAP_ACCESS_SERVICE_NAME "authorized_service" #define LDAP_ACCESS_HOST_NAME "host" #define LDAP_ACCESS_LOCK_NAME "lockout" +#define LDAP_ACCESS_PPOLICY_NAME "ppolicy" #define LDAP_ACCOUNT_EXPIRE_SHADOW "shadow" #define LDAP_ACCOUNT_EXPIRE_AD "ad" @@ -63,6 +65,7 @@ enum ldap_access_rule { LDAP_ACCESS_EXPIRE_POLICY_REJECT, LDAP_ACCESS_EXPIRE_POLICY_WARN, LDAP_ACCESS_EXPIRE_POLICY_RENEW, + LDAP_ACCESS_PPOLICY, LDAP_ACCESS_LAST }; -- cgit