holm/egroupware
1
1
Fork 0
forked from extern/egroupware
Code Issues Pull Requests Packages Projects Releases Wiki Activity

* ActiveDirectory: fixed user who never changed his password get forced to change his password

Browse Source 
pwdlastset attributes seems not set, if password was never changed, different from 0 value for forced password change
This commit is contained in:
Ralf Becker 2016-02-05 14:02:00 +00:00
parent 0f9fcefc8a
commit 845d7d20a7
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
phpgwapi/inc/class.auth_ads.inc.php
View File

@ -124,7 +124,8 @@ class auth_ads implements auth_backend
* Required by EGroupware to force user to change password. * Required by EGroupware to force user to change password.
* *
* @param string $username username of account to authenticate * @param string $username username of account to authenticate
* @return mixed false on error, 0 if user must change on next login, or timestamp of last change * @return mixed false on error, 0 if user must change on next login,
* or NULL if user never changed his password or timestamp of last change
*/ */
static function getLastPwdChange($username) static function getLastPwdChange($username)
{ {
@ -132,10 +133,10 @@ class auth_ads implements auth_backend
if (($adldap = accounts_ads::get_adldap()) && if (($adldap = accounts_ads::get_adldap()) &&
($data = $adldap->user()->info($username, array('pwdlastset')))) ($data = $adldap->user()->info($username, array('pwdlastset'))))
{ {
$ret = !$data[0]['pwdlastset'][0] ? 0 : $ret = !$data[0]['pwdlastset'][0] ? $data[0]['pwdlastset'][0] :
$adldap->utilities()->convertWindowsTimeToUnixTime($data[0]['pwdlastset'][0]); $adldap->utilities()->convertWindowsTimeToUnixTime($data[0]['pwdlastset'][0]);
} }
//error_log(__METHOD__."('$username') returned ".array2string($ret)); //error_log(__METHOD__."('$username') pwdlastset=".array2string($data[0]['pwdlastset'][0])." returned ".array2string($ret));
return $ret; return $ret;
} }