[Samba] Account locked and delayed user data propagation...

[Andrew Bartlett]

On Thu, 2019-12-05 at 11:05 +0100, Marco Gaiarin via samba wrote:
> Mandi! Andrew Bartlett via samba
>   In chel di` si favelave...
> 
> > Also have a look at the msDS-User-Account-Control-Computed attribute. 
> > that will avoid you encoding this logic in your shell scripts as it is
> > what Samba uses internally.
> 
> A-HA! Seems strange to me there's no such field...
> 
> 	https://docs.microsoft.com/en-us/windows/win32/adschema/a-msds-user-account-control-computed
> 
> so, i need to check for 'UF_LOCKOUT', i suppose...
> 

It is an operational (computed) attribute, so you have to ask for it
explicitly.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba