Changeset 1971

Timestamp:

03/07/17 13:44:28 (7 years ago)

Author:

nanardon

Message:

Manage it's impossible to reset krb5ValidEnd, so setting max value

File:

• trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Heimdal/User.pm (modified) (2 diffs)

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Heimdal/User.pm

@@ -161 +161 @@
         /uid/ and return $self->id;
         /modName/ and return $self->{entry}->getModName();
-        /krb5ValidEnd/ and return $self->{entry}->getPrincExpireTime();
+        /krb5ValidEnd/ and do {
+            # (2^31) - 1 means no expiration
+            my $val = $self->{entry}->getPrincExpireTime();
+            return $val == 2_147_483_647 ? undef : $val;
+        };
         /krb5KDCFlags/ and return $self->{entry}->getAttributes();
         /krb5MaxRenew/ and return $self->{entry}->getMaxRenewableLife();
@@ -174 +178 @@
     my ($principal, %fields) = @_;
     for (keys %fields) {
-        /krb5ValidEnd/ and $principal->setPrincExpireTime($fields{$_} || 0);
+        # It's seems krb5ValidEnd cannot be unset using perl API
+        # so we're setting the expiration to max time (2^31 - 1)
+        /krb5ValidEnd/ and $principal->setPrincExpireTime($fields{$_} || 2_147_483_647);
         /krb5KDCFlags/ and $principal->setAttributes($fields{$_} || 0);
         /krb5MaxRenew/ and $principal->setMaxRenewableLife($fields{$_} || 0);