[Samba] Account locked and delayed user data propagation...
Marco Gaiarin
gaio at sv.lnf.it
Wed Dec 4 11:21:24 UTC 2019
Mandi! Rowland penny via samba
In chel di` si favelave...
> I think you are over thinking this ;-)
I'm simply applying the policy... ;-)
https://docs.microsoft.com/it-it/windows/win32/adschema/a-lockouttime
say at the bottom:
This attribute value is only reset when the account is logged onto successfully.
This means that this value may be non zero, yet the account is not locked out.
To accurately determine if the account is locked out, you must add the Lockout-Duration
to this time and compare the result to the current time, accounting for local time zones
and daylight savings time.
> So, all you need to do, check for the lockouttime attribute and if found and
> it isn't '0', set it to '0'
Better to fire up a bug? Or there's an operational field like
'LockoutExpiration' to test with?
Thanks.
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/
Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797
Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
More information about the samba
mailing list