Revert "Allow LDAP to decide when an expiration warning is warranted"

This reverts commit b0b9c38dfce3e3ccbfaa4d00fdf2ea08a70d41a6.

1 files changed, 3 insertions, 4 deletions

diff --git a/src/responder/pam/pamsrv_cmd.c b/src/responder/pam/pamsrv_cmd.c
index 7fcf9854..3c9d7600 100644
--- a/src/responder/pam/pamsrv_cmd.c
+++ b/src/responder/pam/pamsrv_cmd.c
@@ -409,10 +409,9 @@ static errno_t filter_responses(struct confdb_ctx *cdb,
                     }
                     memcpy(&expire_warn, resp->data + sizeof(uint32_t),
                            sizeof(uint32_t));
-                    /* TODO: Add an option to limit the display of the
-                     * expiration warning to a specified number of
-                     * days (e.g. 14)
-                     */
+                    if(expire_warn > pam_expiration_warning * (60 * 60 * 24)) {
+                        resp->do_not_send_to_client = true;
+                    }
                     break;
                 default:
                     DEBUG(7, ("User info type [%d] not filtered.\n"));