[SSSD] [PATCH] Don't treat 0 as default for pam_pwd_expiration warning

Jakub Hrozek jhrozek at redhat.com
Thu Feb 28 13:29:54 UTC 2013


There was another bug in pam_pwd_expiration warning. If it was set to 0
which means "always display whatever server sends", the condition
wouldn't hit and effectivelly the option would be set to -1 (=use
provider default).
-------------- next part --------------
>From d01880b98628812374219be7294b9a71a3b825ff Mon Sep 17 00:00:00 2001
From: Jakub Hrozek <jhrozek at redhat.com>
Date: Thu, 28 Feb 2013 14:24:59 +0100
Subject: [PATCH] Don't treat 0 as default for pam_pwd_expiration warning

---
 src/confdb/confdb.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/confdb/confdb.c b/src/confdb/confdb.c
index 31c48bd28aee37008687e7e255ebf2ef2d79798a..e1888678eaf45446a89c4a290d55356deae0afdf 100644
--- a/src/confdb/confdb.c
+++ b/src/confdb/confdb.c
@@ -1038,7 +1038,8 @@ static int confdb_get_domain_internal(struct confdb_ctx *cdb,
         }
     }
 
-    if (val > 0) {
+    DEBUG(SSSDBG_TRACE_LIBS, ("pwd_expiration_warning is %d\n", val));
+    if (val >= 0) {
         DEBUG(SSSDBG_CONF_SETTINGS,
               ("Setting domain password expiration warning to %d days\n", val));
         /* The value is in days, transform it to seconds */
-- 
1.8.1.2



More information about the sssd-devel mailing list