| commit | 5246d480b1e3aba4921b27293f2573bbee380570 | |
| author | Tim Beale <timbeale@catalyst.net.nz> | |
| Tue, 8 May 2018 03:11:30 +0000 (8 15:11 +1200) | ||
| committer | Garming Sam <garming@samba.org> | |
| Wed, 23 May 2018 04:55:30 +0000 (23 06:55 +0200) | ||
| tree | b8df768cf91584c8b411e1e400c7b7637c6b9cff | treesnapshot (tar.gz zip) |
| parent | 442a38c918ae1666b35285013365553b39837f14 | commitdiff |
dsdb: PSO support for msDS-User-Account-Control-Computed
msDS-User-Account-Control-Computed uses the effective-lockoutDuration to
determine if a user is locked out or not. If a PSO applies to the user,
then the effective-lockoutDuration is the PSO's msDS-LockoutDuration
setting. Otherwise it is the domain default lockoutDuration value.
Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
msDS-User-Account-Control-Computed uses the effective-lockoutDuration to
determine if a user is locked out or not. If a PSO applies to the user,
then the effective-lockoutDuration is the PSO's msDS-LockoutDuration
setting. Otherwise it is the domain default lockoutDuration value.
Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
| source4/dsdb/samdb/ldb_modules/operational.c | diffblobblamehistory |