Hello everyone,

I noticed sssd displays account locked info only when integrated with AD

I've done some researches and found that if i edit src/providers/ldap/sdap_async_connection.c like the patch above, ldap also shows account locked info.

/ ==Connect-to-LDAP-Server=============================================== /

@@ -789,6 +790,11 @@ static void simple_bind_done(struct sdap_op *op,
"Password Policy Response: expire [%d] grace [%d] "
"error [%s].\n", pp_expire, pp_grace,
ldap_passwordpolicy_err2txt(pp_error));
+ if(strstr(ldap_passwordpolicy_err2txt(pp_error),"Account locked"))
+ {
+ syslog(LOG_ERR,"Error detected: %s",ldap_passwordpolicy_err2txt(pp_error));
+ ret = ERR_ACCOUNT_LOCKED;
+ }
if (!state->ppolicy)
state->ppolicy = talloc_zero(state,
struct sdap_ppolicy_data);