pam_winbind: no longer use wbcUserPasswordPolicyInfo when authenticating
authorStefan Metzmacher <metze@samba.org>
Sun, 2 Apr 2017 22:19:25 +0000 (00:19 +0200)
committerStefan Metzmacher <metze@samba.org>
Thu, 6 Apr 2017 08:07:39 +0000 (10:07 +0200)
commitfba7ed9a3fa6fcb2d90d1271ae81ec11b554bd2d
tree1be3739134ab1f29ae1cb77d648857ab76988362
parent5ee494cbd77d3b988f4472bca9e936bd540f055f
pam_winbind: no longer use wbcUserPasswordPolicyInfo when authenticating

The expiry time for the specific user comes from
info->pass_must_change_time and nothing else.

The authenticating DC knows which password policy applies
to the user, that's nothing the client can do, as
domain trusts and fine-grained password policies makes
this a very complex task.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12725

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Christof Schmitt <cs@samba.org>
nsswitch/pam_winbind.c