#673 [enh] honor eDirectory account lockout
Closed: Fixed Opened by ossman.

This is similar to #672 but about using the Novell NDS/eDirectory fields instead of the NIS ones.

Relevant ones are:

loginDisabled: boolean

loginExpirationTime: Unix timestamp (UTC)

loginAllowedTimeMap: binary blob

The last one is a bit magical and indicates when during a day an account is allowed to log in. Some details here:

http://developer.novell.com/documentation/ndslib/schm_enu/data/sdk1588.html

Might be overkill supporting that one and the first two are probably more essential.


Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.5.0
priority: major => minor

For the time being I will only implement loginDisabled and loginExpirationTime.

I have an idea how loginAllowedTimeMap is working, but haven't found any real documentation. If someone can provided a link to some official docs I'm happy to implement it, too.

coverity: =>
owner: somebody => sbose
status: new => assigned

Fields changed

milestone: SSSD 1.5.0 => SSSD 1.6.0

Since there is no test environment the proposal is to defer till someone explicitly asks for this functionality. Then we will resurrect the patch and engage with the requester to do testing.

patch: => 0
upgrade: => 0

I'm working on testing this. Just waiting to get access to a server. :)

Fields changed

patch: 0 => 1

Fixed by 37e7e93f1996cf50677cf59fd8af6938dd5d85b2

resolution: => fixed
rhbz: =>
status: assigned => closed

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=785875

rhbz: => [https://bugzilla.redhat.com/show_bug.cgi?id=785875 785875]

Metadata Update from @ossman:
- Issue assigned to sbose
- Issue set to the milestone: SSSD 1.6.0

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/1715

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata