Fixes #4473 altering SSH keys when user is locked

include/functions.inc

@@ -2825,6 +2825,23 @@ function lock_samba_account($mode, $attrs)
   return $modify;
 }
 
+/* Lock or unlock ssh account */
+function lock_ssh_account($mode, $attrs, &$modify)
+{
+  global $config;
+  if (!isset($attrs['sshPublicKey'])) {
+    return;
+  }
+  $modify['sshPublicKey'] = array();
+  for ($i = 0; $i < $attrs['sshPublicKey']['count']; ++$i) {
+    if ($mode == 'LOCK') {
+      $modify['sshPublicKey'][] = preg_replace('/^/', 'disabled-', $attrs['sshPublicKey'][0]);
+    } else {
+      $modify['sshPublicKey'][] = preg_replace('/^disabled-/', '', $attrs['sshPublicKey'][0]);
+    }
+  }
+}
+
 
 /*!
  * \brief Get the Change Sequence Number of a certain DN

include/password-methods/class_password-methods.inc

@@ -174,6 +174,9 @@ class passwordMethod
       // (Un)lock the samba account
       $modify = lock_samba_account($mode, $attrs);
 
+      // (Un)lock SSH keys
+      lock_ssh_account($mode, $attrs, $modify);
+
       // (Un)lock the account by modifying the password hash.
       $pwdClass = new user($config, $dn);
       $pwdClass->callHook('PRE'.$mode, array(), $ret);