389-ds-base

#47723 winsync sets AccountUserControl in AD to 544
Closed: wontfix Opened by nriss.

Closed: wontfix
Reopen Issue

Hi,

We notice that when a user is synchronized from 389 Directory to Active Directory the AccountUserControl value was 544 (mean NORMAL ACCOUNT + PASSWD_NOTREQD http://support.microsoft.com/kb/305144/en-us).

This isn't secure (allow user to set empty password). Letting the administrator set a default value for this attribute in synchronization parameters would be nice.

Thanks.

Need to investigate: does AD have default flag configuration for new users added via LDAP?

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1206309

Reviewed by Rich (Thank you!!)

Pushed to master:
fd81643..d85ef49 master -> master
commit d85ef49c1f642623f067370987b94a9ab36fa4bb

Metadata Update from @nhosoi:
- Issue assigned to nhosoi
- Issue set to the milestone: 1.3.4 backlog

389-ds-base is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in 389-ds-base's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/389ds/389-ds-base/issues/1057

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata Update from @spichugi:
- Issue close_status updated to: wontfix (was: Fixed)
Metadata
None
None
None
Normal
ack
Community
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.