From: Andrew Bartlett <abartlet@samba.org>
Date: Fri, 17 May 2024 02:19:31 +0000 (+1200)
Subject: dsdb: Reduce minimum maxPwdAge from 1 day to nil
X-Git-Tag: tdb-1.4.11~411
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=3669479f22f2109a64250ffabd1f6453882d29f1;p=thirdparty%2Fsamba.git

dsdb: Reduce minimum maxPwdAge from 1 day to nil

This allows us to have tests, which pass on Windows, that
use a very short maxPwdAge.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>
---

diff --git a/source4/dsdb/samdb/ldb_modules/operational.c b/source4/dsdb/samdb/ldb_modules/operational.c
index eac9182256f..867bc4fff95 100644
--- a/source4/dsdb/samdb/ldb_modules/operational.c
+++ b/source4/dsdb/samdb/ldb_modules/operational.c
@@ -780,13 +780,13 @@ static NTTIME get_msds_user_password_expiry_time_computed(struct ldb_module *mod
 	 *
 	 * Possible values are in the range of:
 	 *
-	 * maxPwdAge: -864000000001
+	 * maxPwdAge: -2
 	 * to
 	 * maxPwdAge: -9223372036854775808 (INT64_MIN)
 	 *
 	 */
 	maxPwdAge = get_user_max_pwd_age(module, msg, parent, domain_dn);
-	if (maxPwdAge >= -864000000000) {
+	if (maxPwdAge >= -1) {
 		/*
 		 * This is not really possible...
 		 */