s4:dsdb/password_hash: only set pwdLastSet if required

BUG: https://bugzilla.samba.org/show_bug.cgi?id=9654

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/source4/dsdb/samdb/ldb_modules/password_hash.c b/source4/dsdb/samdb/ldb_modules/password_hash.c
index 515be2621eda014ec081262566403ed39eaf2324..f1b9b36a03c2c872ad38302e6245b378151100fa 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/password_hash.c
+++ b/source4/dsdb/samdb/ldb_modules/password_hash.c
@@ -2251,12 +2251,14 @@ static int update_final_msg(struct setup_password_fields_io *io)
                        return ret;
                }
        }
-       ret = samdb_msg_add_uint64(ldb, io->ac,
-                                  io->ac->update_msg,
-                                  "pwdLastSet",
-                                  io->g.last_set);
-       if (ret != LDB_SUCCESS) {
-               return ret;
+       if (io->ac->update_lastset) {
+               ret = samdb_msg_add_uint64(ldb, io->ac,
+                                          io->ac->update_msg,
+                                          "pwdLastSet",
+                                          io->g.last_set);
+               if (ret != LDB_SUCCESS) {
+                       return ret;
+               }
        }
 
        return LDB_SUCCESS;