From: troup <>
Date: Mon, 9 Apr 2007 19:54:29 +0000 (+0000)
Subject: '*PK*' will allow a 'locked' account to login in certain situations, remove it for... 
X-Git-Tag: debian_userdir-ldap_0-3-14~15
X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fuserdir-ldap.git;a=commitdiff_plain;h=6d44670b928bb0a25fc13236df9c9903926a857e

'*PK*' will allow a 'locked' account to login in certain situations, remove it for now.  We still need a way to disable accounts but not mail, but this isn't it.
---

diff --git a/ud-generate b/ud-generate
index 03a5186..f7c929e 100755
--- a/ud-generate
+++ b/ud-generate
@@ -180,8 +180,7 @@ def GenSSHShadow(l,File):
       # If the account is locked, do not write it.
       # This is a partial stop-gap. The ssh also needs to change this
       # to ignore ~/.ssh/authorized* files.
-      if (string.find(GetAttr(x,"userPassword"),"*LK*")  != -1) \
-             or (string.find(GetAttr(x,"userPassword"),"*PK*")  != -1):
+      if (string.find(GetAttr(x,"userPassword"),"*LK*")  != -1):
          continue;
 
       if x[1].has_key("uidNumber") == 0 or \