Re: [SSSD] [PATCH] Add LDAP access control based on NDS attributes

[Stephen Gallagher]

On Thu, 2011-06-23 at 13:48 +0200, Sumit Bose wrote:
>  Hi,
>  
>  this patch adds support for the NDS/eDirectory access control attributes
>  loginDisabled, loginExpirationTime and loginAllowedTimeMap. It is not
>  fully tested because currently I do not have access to an eDirectory
>  server. Since the impact on other parts of the code is minimal I didn't
>  add a seperate configure option for it but only mark it in the man page
>  as experimental.
>  
>  I you have a chance to test this feature please let me know the result. 

I was a little concerned about the use of strptime() for the account
expiration check, but after doing some digging I see that NDS is
(supposed to) guarantee leading zeroes which will eliminate any
potential ambiguity.

Ack.