Merge pull request #12437 from uberbrady/ldap_allow_undelegatable_users_to_login

Fixed: Active Directory "not-delegated+dont-expire-password+normal-accounts" can now login
This commit is contained in:
snipe 2023-02-01 13:38:59 -08:00 committed by GitHub
commit 0d4ca218c5
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -314,6 +314,7 @@ class LdapSync extends Command
'4194816',// 0x400200 NORMAL_ACCOUNT, DONT_REQ_PREAUTH
'4260352', // 0x410200 NORMAL_ACCOUNT, DONT_EXPIRE_PASSWORD, DONT_REQ_PREAUTH
'1049088', // 0x100200 NORMAL_ACCOUNT, NOT_DELEGATED
'1114624', // 0x110200 NORMAL_ACCOUNT, DONT_EXPIRE_PASSWORD, NOT_DELEGATED,
];
$user->activated = (in_array($results[$i]['useraccountcontrol'][0], $enabled_accounts)) ? 1 : 0;