server session FEATURE handle expired accounts

michalvasko · michalvasko · commit 22b4fe75c2da · 2020-11-04T08:52:29.000+01:00
Fixes #267
diff --git a/src/session_server_ssh.c b/src/session_server_ssh.c
@@ -700,6 +700,9 @@ auth_password_get_pwd_hash(const char *username)
         if (!spwd) {
             VRB("Failed to retrieve the shadow entry for \"%s\".", username);
             return NULL;
+        } else if ((spwd->sp_expire > -1) && (spwd->sp_expire <= (time(NULL) / (60 * 60 * 24)))) {
+            WRN("User \"%s\" account has expired.", username);
+            return NULL;
         }
 
         pass_hash = spwd->sp_pwdp;

Original file line number	Diff line number	Diff line change
`@@ -700,6 +700,9 @@ auth_password_get_pwd_hash(const char *username)`
`700`	`700`	`if (!spwd) {`
`701`	`701`	`VRB("Failed to retrieve the shadow entry for \"%s\".", username);`
`702`	`702`	`return NULL;`
	`703`	`+ } else if ((spwd->sp_expire > -1) && (spwd->sp_expire <= (time(NULL) / (60 * 60 * 24)))) {`
	`704`	`+ WRN("User \"%s\" account has expired.", username);`
	`705`	`+ return NULL;`
`703`	`706`	`}`
`704`	`707`
`705`	`708`	`pass_hash = spwd->sp_pwdp;`