Merged PR 3496: Disable daemon option for all AD users #124445

BeyondTrust · Nov 29, 2017 · 1d81a2a · 1d81a2a
1 parent 849c296
commit 1d81a2a
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/lsass/interop/nsswitch/aix/lam-main.c b/lsass/interop/nsswitch/aix/lam-main.c
@@ -269,6 +269,7 @@ LsaNssGetSupportedAttrs(
         {S_PGRP, AL_USERATTR, SEC_CHAR},
         {S_GROUPS, AL_USERATTR, SEC_LIST},
         {S_GROUPSIDS, AL_USERATTR, SEC_LIST},
+        {S_DAEMONCHK, AL_USERATTR, SEC_BOOL},
         {S_LOCKED, AL_USERATTR, SEC_BOOL},
         {"SID", AL_USERATTR, SEC_CHAR},
         {"UPN", AL_USERATTR, SEC_CHAR},
@@ -294,6 +295,7 @@ LsaNssGetSupportedAttrs(
         &pList[17],
         &pList[18],
         &pList[19],
+        &pList[20],
         NULL
     };
 

diff --git a/lsass/interop/nsswitch/aix/lam-user.c b/lsass/interop/nsswitch/aix/lam-user.c
@@ -551,6 +551,10 @@ LsaNssGetUserAttr(
                     &pResult->attr_un.au_char);
         BAIL_ON_LSA_ERROR(dwError);
     }
+    else if (!strcmp(pszAttribute, S_DAEMONCHK))
+    {
+        pResult->attr_un.au_int = 0;
+    }
     else if (!strcmp(pszAttribute, S_LOCKED))
     {
         pResult->attr_un.au_int = pInfo->bAccountLocked;