I have been running experiments and I found an interesting multiple representations of never expiring accounts. I see when I create an account using the ADUC in windows 10 pro on samba-dc-4.7.5-2.fc27 when I use ldapsearch to get accountExpires I get 9223372036854775807 if I set the account to expire I get the expected value for that date. Here is the strange part when I set the account back to never expires the value is then 0 So both 9223372036854775807 and 0 represent an account that never expires. If I set the value using ldapmodify it shows the same in ADUC under windows 10 pro.
On Tue, 27 Feb 2018 21:39:16 -0700 Jeff Sadowski via samba <samba at lists.samba.org> wrote:> I have been running experiments and I found an interesting multiple > representations of never expiring accounts. > I see when I create an account using the ADUC in windows 10 pro on > samba-dc-4.7.5-2.fc27 > when I use ldapsearch to get accountExpires I get 9223372036854775807 > if I set the account to expire I get the expected value for that date. > Here is the strange part when I set the account back to never expires > the value is then 0 > So both 9223372036854775807 and 0 represent an account that never > expires. If I set the value using ldapmodify it shows the same in > ADUC under windows 10 pro. >You could have found this out by doing an internet search, where something like this would turn up: https://msdn.microsoft.com/en-us/library/ms675098%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396 Rowland
It doesn't tell me what sets it to what. I thought it was interesting that when I created the account it used one (probably done from samba) and that when I set it back it used zero probably from the ADUC interface. On Wed, Feb 28, 2018 at 1:56 AM, Rowland Penny via samba <samba at lists.samba.org> wrote:> On Tue, 27 Feb 2018 21:39:16 -0700 > Jeff Sadowski via samba <samba at lists.samba.org> wrote: > >> I have been running experiments and I found an interesting multiple >> representations of never expiring accounts. >> I see when I create an account using the ADUC in windows 10 pro on >> samba-dc-4.7.5-2.fc27 >> when I use ldapsearch to get accountExpires I get 9223372036854775807 >> if I set the account to expire I get the expected value for that date. >> Here is the strange part when I set the account back to never expires >> the value is then 0 >> So both 9223372036854775807 and 0 represent an account that never >> expires. If I set the value using ldapmodify it shows the same in >> ADUC under windows 10 pro. >> > > You could have found this out by doing an internet search, where > something like this would turn up: > > https://msdn.microsoft.com/en-us/library/ms675098%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396 > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba