r13069: adding a hack on instructions from andrew

diff --git a/source/kdc/hdb-ldb.c b/source/kdc/hdb-ldb.c
index 7cb02b82242bf2bab8ac0e3845ebf85408f19e04..43009c1c1bd1285e5b63801c1844a513e4228a5d 100644 (file)
--- a/source/kdc/hdb-ldb.c
+++ b/source/kdc/hdb-ldb.c
@@ -355,7 +355,8 @@ static krb5_error_code LDB_message2entry(krb5_context context, HDB *db,
                *entry_ex->entry.valid_end = nt_time_to_unix(acct_expiry);
        }
 
-       if (!(userAccountControl & UF_DONT_EXPIRE_PASSWD)) {
+       if (!(userAccountControl & UF_DONT_EXPIRE_PASSWD) &&
+           (ent_type != HDB_LDB_ENT_TYPE_KRBTGT)) {
                NTTIME must_change_time
                        = samdb_result_force_password_change((struct ldb_context *)db->hdb_db, mem_ctx, 
                                                             domain_dn, msg,