[PATCH] Add LDAP access control based on NDS attributes

[Sumit Bose]

Hi,

this patch adds support for the NDS/eDirectory access control attributes
loginDisabled, loginExpirationTime and loginAllowedTimeMap. It is not
fully tested because currently I do not have access to an eDirectory
server. Since the impact on other parts of the code is minimal I didn't
add a seperate configure option for it but only mark it in the man page
as experimental.

I you have a chance to test this feature please let me know the result.

bye,
Sumit

[Stephen Gallagher]

On Thu, 2011-06-23 at 13:48 +0200, Sumit Bose wrote:
>  Hi,
>  
>  this patch adds support for the NDS/eDirectory access control attributes
>  loginDisabled, loginExpirationTime and loginAllowedTimeMap. It is not
>  fully tested because currently I do not have access to an eDirectory
>  server. Since the impact on other parts of the code is minimal I didn't
>  add a seperate configure option for it but only mark it in the man page
>  as experimental.
>  
>  I you have a chance to test this feature please let me know the result. 

I was a little concerned about the use of strptime() for the account
expiration check, but after doing some digging I see that NDS is
(supposed to) guarantee leading zeroes which will eliminate any
potential ambiguity.

Ack.

[Stephen Gallagher]

On Thu, 2011-06-23 at 09:54 -0400, Stephen Gallagher wrote:
>  On Thu, 2011-06-23 at 13:48 +0200, Sumit Bose wrote:
>  > Hi,
>  > 
>  > this patch adds support for the NDS/eDirectory access control attributes
>  > loginDisabled, loginExpirationTime and loginAllowedTimeMap. It is not
>  > fully tested because currently I do not have access to an eDirectory
>  > server. Since the impact on other parts of the code is minimal I didn't
>  > add a seperate configure option for it but only mark it in the man page
>  > as experimental.
>  > 
>  > I you have a chance to test this feature please let me know the result.
>  
>  
>  I was a little concerned about the use of strptime() for the account
>  expiration check, but after doing some digging I see that NDS is
>  (supposed to) guarantee leading zeroes which will eliminate any
>  potential ambiguity.
>  
>  Ack. 
Pushed to master.