slapd/overlays/ppolicy.c

893 	ppbind *ppb = op->o_callback->sc_private;
894 	if ( ppb->send_ctrl ) {
895 		ctrls_cleanup( op, rs, ppb->oldctrls );
903 	ppbind *ppb = op->o_callback->sc_private;
904 	slap_overinst *on = ppb->on;
905 	Modifications *mod = ppb->mod, *m;
916 	if ( ppb->pErr != PP_noError ) {
963 				if (ppb->pp.pwdFailureCountInterval == 0) {
967 							ppb->pp.pwdFailureCountInterval) {
978 		if ((ppb->pp.pwdMaxFailure > 0) &&
979 			(fc >= ppb->pp.pwdMaxFailure - 1)) {
1017 		if ( ppb->pp.pwdMustChange &&
1027 			if ( ppb->set_restrict ) {
1032 			ppb->pErr = PP_changeAfterReset;
1043 			if (ppb->pp.pwdMaxAge == 0) goto grace;
1051 				if (now - pwtime > ppb->pp.pwdMaxAge ) pwExpired = 1;
1059 			ngut = ppb->pp.pwdGraceAuthNLimit;
1062 			ngut = ppb->pp.pwdGraceAuthNLimit - ngut;
1073 			ppb->pErr = PP_passwordExpired;
1104 		if ((ppb->pp.pwdMaxAge < 1) || (pwExpired) || (ppb->pp.pwdExpireWarning < 1))
1116 		if (ppb->pp.pwdMaxAge - age < ppb->pp.pwdExpireWarning ) {
1120 			warn = ppb->pp.pwdMaxAge - age; /* seconds left until expiry */
1172 	if ( ppb->send_ctrl ) {
1177 		if ( ppb->pErr == PP_accountLocked && !pi->use_lockout ) {
1178 			ppb->pErr = PP_noError;
1180 		ctrl = create_passcontrol( op, warn, ngut, ppb->pErr );
1181 		ppb->oldctrls = add_passcontrol( op, rs, ctrl );
1203 		ppbind *ppb;
1215 		ppb = (ppbind *)(cb+1);
1216 		ppb->on = on;
1217 		ppb->pErr = PP_noError;
1218 		ppb->set_restrict = 1;
1224 		cb->sc_private = ppb;
1229 			ppb->send_ctrl = 1;
1233 		ppolicy_get( op, e, &ppb->pp );
1235 		rc = account_locked( op, e, &ppb->pp, &ppb->mod );
1241 			ppb->pErr = PP_accountLocked;
1347 		ppbind *ppb;
1359 		ppb = (ppbind *)(cb+1);
1360 		ppb->on = on;
1361 		ppb->pErr = PP_noError;
1362 		ppb->send_ctrl = 1;
1364 		ppb->set_restrict = 0;
1370 		cb->sc_private = ppb;
1374 		ppolicy_get( op, e, &ppb->pp );
1376 		rc = account_locked( op, e, &ppb->pp, &ppb->mod );
1382 			ppb->pErr = PP_accountLocked;