r12631: Now we have fixed the provision script, we don't need to work around

it here.

Andrew Bartlett
(This used to be commit f282fab6113cbd6a431139cbe7f021864f31c3d1)

diff --git a/source4/kdc/hdb-ldb.c b/source4/kdc/hdb-ldb.c
index 0e087e1d77f3f5ce2b188ae95e9306ba834001f2..ceffad7ef734ea0bef79f204263291d376a0853a 100644 (file)
--- a/source4/kdc/hdb-ldb.c
+++ b/source4/kdc/hdb-ldb.c
@@ -355,7 +355,7 @@ static krb5_error_code LDB_message2entry(krb5_context context, HDB *db,
                *entry_ex->entry.valid_end = nt_time_to_unix(acct_expiry);
        }
 
-       if ((ent_type != HDB_LDB_ENT_TYPE_KRBTGT) && (!(userAccountControl & UF_DONT_EXPIRE_PASSWD))) {
+       if (!(userAccountControl & UF_DONT_EXPIRE_PASSWD)) {
                NTTIME must_change_time
                        = samdb_result_force_password_change((struct ldb_context *)db->hdb_db, mem_ctx, 
                                                             domain_dn, msg,