dsdb: Reduce minimum maxPwdAge from 1 day to nil

This allows us to have tests, which pass on Windows, that
use a very short maxPwdAge.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>

diff --git a/source4/dsdb/samdb/ldb_modules/operational.c b/source4/dsdb/samdb/ldb_modules/operational.c
index eac9182256f57f2f71473b4ad9414cdffd230092..867bc4fff9560eb1dd7cfdb1882dbaf01e32d4ff 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/operational.c
+++ b/source4/dsdb/samdb/ldb_modules/operational.c
@@ -780,13 +780,13 @@ static NTTIME get_msds_user_password_expiry_time_computed(struct ldb_module *mod
         *
         * Possible values are in the range of:
         *
-        * maxPwdAge: -864000000001
+        * maxPwdAge: -2
         * to
         * maxPwdAge: -9223372036854775808 (INT64_MIN)
         *
         */
        maxPwdAge = get_user_max_pwd_age(module, msg, parent, domain_dn);
-       if (maxPwdAge >= -864000000000) {
+       if (maxPwdAge >= -1) {
                /*
                 * This is not really possible...
                 */