dsdb: Rework samdb_result_acct_flags to use either userAccountControl or msDS-User...
authorAndrew Bartlett <abartlet@samba.org>
Tue, 29 Oct 2013 04:30:18 +0000 (17:30 +1300)
committerStefan Metzmacher <metze@samba.org>
Wed, 2 Apr 2014 15:12:46 +0000 (17:12 +0200)
commit6f8fb163e02579d57e731c0c09eafee5627bec62
tree760a79f0d2718a0a5a696a1860a0ad247b07d582
parent77e4beb0e027bb49454716b86c782c98c2ed823b
dsdb: Rework samdb_result_acct_flags to use either userAccountControl or msDS-User-Account-Control-Computed

This allows us to avoid the domain lookup in the constructed attribute
when not required.

By using msDS-User-Account-Control-Computed the lockout and password
expiry checks are now handled in the operational ldb module.

Andrew Bartlett

Change-Id: I6eb94933e4602e2e50c2126062e9dfa83a46191b
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
source3/passdb/pdb_samba_dsdb.c
source4/auth/ntlm/auth_sam.c
source4/auth/sam.c
source4/dsdb/common/util.c
source4/rpc_server/samr/dcesrv_samr.c