From c86852aef89191a9a3116b622fa1aa2c7dfaffcd Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Thu, 20 Oct 2005 04:56:47 +0000 Subject: r11206: It appears to me that any account may operate as a server. Andrew Bartlett (This used to be commit 3b6c9c7cbc1d5c4dd32d3c1db18ddbccbb8cf17a) --- source4/kdc/hdb-ldb.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'source4/kdc') diff --git a/source4/kdc/hdb-ldb.c b/source4/kdc/hdb-ldb.c index 2f97fd6ee8..7635501064 100644 --- a/source4/kdc/hdb-ldb.c +++ b/source4/kdc/hdb-ldb.c @@ -116,6 +116,9 @@ static HDBFlags uf2HDBFlags(krb5_context context, int userAccountControl, enum h if (ent_type == HDB_LDB_ENT_TYPE_CLIENT || ent_type == HDB_LDB_ENT_TYPE_ANY) { flags.client = 1; } + if (ent_type == HDB_LDB_ENT_TYPE_SERVER || ent_type == HDB_LDB_ENT_TYPE_ANY) { + flags.server = 1; + } flags.invalid = 0; } @@ -144,8 +147,9 @@ static HDBFlags uf2HDBFlags(krb5_context context, int userAccountControl, enum h flags.invalid = 0; } + /* Not permitted to act as a client if disabled */ if (userAccountControl & UF_ACCOUNTDISABLE) { - flags.invalid = 1; + flags.client = 0; } if (userAccountControl & UF_LOCKOUT) { flags.invalid = 1; -- cgit