Matthias Dieter Wallnöfer
607ceff234
s3/s4 - Adapt the IDL changes on various locations
2009-10-08 09:50:19 +02:00
Andrew Tridgell
caa9e3ff8e
s4-samr: fake up a samr_ValidatePassword response
...
mdw is working on the correct call to check the password strength
2009-10-02 16:02:42 +10:00
Andrew Tridgell
1261d694f0
more include minimisation
2009-09-19 14:12:01 -07:00
Matthias Dieter Wallnöfer
ad244f7252
s4:samr - Fix up the SAMR server to support the primary group of a user in the right way
...
When doing some tests with the NT User Manager for Domains on s4 I noticed that the
handling of the primary group for a user wasn't correct. So I fixed this.
Also some cosmetic changes (tab indent corrections).
2009-09-07 08:37:24 +02:00
Günther Deschner
05fbe0c7f7
libds: merge the UF<->ACB flag mapping functions.
...
Guenther
2009-07-13 15:36:07 +02:00
Günther Deschner
8db45607f8
libds: share UF_ flags between samba3 and 4.
...
Guenther
2009-07-13 15:36:06 +02:00
Volker Lendecke
68e3442922
Move a comment where it belongs
2009-05-30 18:27:13 +02:00
Andrew Bartlett
227553f904
Win2k3 don't allow creating of domain trust accounts over SAMR
2009-05-29 17:12:06 +10:00
Andrew Bartlett
6ef65389fd
Don't use crossRef records to find our own domain
...
A single AD server can only host a single domain, so don't stuff about
with looking up our crossRef record in the cn=Partitions container.
We instead trust that lp_realm() and lp_workgroup() works correctly.
Andrew Bartlett
2009-05-26 12:37:09 +10:00
Andrew Tridgell
2bf1e8b5e1
cope with lanman auth being disabled in old password change code
...
When lanman auth is disabled and a user calls a password change
method that requires it we should give NT_STATUS_NOT_SUPPORTED
2009-05-25 13:39:56 +10:00
Andrew Bartlett
0d4bd2c397
s4:samr Use ldb_context * rather than void *
2009-04-23 12:19:10 +02:00
Jelmer Vernooij
94069bd274
s4: Use same function signature for convert_* as s3.
2009-03-01 19:55:46 +01:00
Jelmer Vernooij
9ffb6d2d9e
Add allow_badcharcnv argument to all conversion function, for
...
consistency with Samba 3.
2009-03-01 06:33:40 +01:00
Matthias Dieter Wallnöfer
91bfd5f201
s4-samr: Fix Bug #5946 . userparameters handling in samr server.
...
Signed-off-by: Günther Deschner <gd@samba.org>
2008-12-10 00:07:25 +01:00
Günther Deschner
4bcf8edcf8
s4-samr: fix samr callers after SAMR_FIELD_PASSWORD change.
...
Guenther
2008-12-05 14:27:03 +01:00
Günther Deschner
ce01168158
s4-samr: fix s4 samr server after idl change.
...
Guenther
2008-12-05 14:27:03 +01:00
Günther Deschner
01b6eee69f
s4-samr: use samr_DomainServerState in samr server.
...
Guenther
2008-12-02 00:37:39 +01:00
Günther Deschner
09998ab89d
s4-samr: merge samr_QueryUserInfo{2} from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:31 +01:00
Günther Deschner
15e011564a
s4-samr: merge samr_QueryGroupInfo from s3 idl. (fixme python)
...
Guenther
2008-11-10 21:46:30 +01:00
Günther Deschner
0548642e5b
s4-samr: merge samr_QueryAliasInfo from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:30 +01:00
Günther Deschner
99c2fac6b2
s4-samr: merge samr_EnumDomainGroups from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:30 +01:00
Günther Deschner
1ea97d76ed
s4-samr: merge samr_EnumDomainUsers from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:30 +01:00
Günther Deschner
d4d9a73ad1
s4-samr: merge samr_EnumDomains from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:30 +01:00
Günther Deschner
bb1d7684d2
s4-samr: merge samr_LookupDomain from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:30 +01:00
Günther Deschner
61391d0ade
s4-samr: merge samr_LookupNames from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:30 +01:00
Günther Deschner
2efec54b8d
s4-samr: merge samr_EnumDomainAliases from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:29 +01:00
Günther Deschner
aaca059a35
s4-samr: merge samr_QueryDisplayInfo from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:29 +01:00
Günther Deschner
3a9b42fa75
s4-samr: merge samr_QueryDisplayInfo2 from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:29 +01:00
Günther Deschner
bab255f09b
s4-samr: merge samr_QueryDisplayInfo3 from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:29 +01:00
Günther Deschner
68a2ca11dc
s4-samr: merge samr_GetGroupsForUser from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:29 +01:00
Günther Deschner
f7dfea32fc
s4-samr: merge samr_QueryDomainInfo from s3 idl. (fixme python)
...
Guenther
2008-11-10 21:46:29 +01:00
Günther Deschner
9774927947
s4-samr: merge samr_QueryGroupMember from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:28 +01:00
Günther Deschner
a2a26da899
s4-samr: merge samr_Connect5 from s3 idl. (fixme python)
...
Guenther
2008-11-10 21:46:28 +01:00
Günther Deschner
8f1559c350
s4-samr: merge samr_GetDomPwInfo from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:28 +01:00
Günther Deschner
f42f1ae5a8
s4-samr: merge samr_GetUserPwInfo from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:27 +01:00
Günther Deschner
94b7db1fb4
s4-samr: merge samr_RidToSid from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:27 +01:00
Günther Deschner
5ce30d0f4d
s4-samr: merge samr_QuerySecurity from s3 idl. (fixme: python)
...
Guenther
2008-11-10 21:46:27 +01:00
Günther Deschner
93c6129c99
s4-samr: merge samr_LookupRids from s3 idl.
...
Guenther
2008-11-10 21:46:27 +01:00
Günther Deschner
e0a6e3b23b
s4-samr: merge samr_ChangePasswordUser3 from s3 idl.
...
Guenther
2008-11-10 21:46:26 +01:00
Günther Deschner
244dee6275
s4-samr: prepare for Query.*Info calls: change macros.
...
Guenther
2008-11-10 21:46:26 +01:00
Günther Deschner
9888ed1d9b
s4-samr: merge samr_UserInfo20 from s3 idl.
...
This must not be treated as a normal string (strlen truncates it).
Guenther
2008-11-10 21:46:25 +01:00
Andrew Bartlett
31158c0256
Use ldb_dn_from_ldb_val() to create a DN in the SAMR server
...
The previous code incorrectly cast an ldb_val into a char *.
Andrew Bartlett
2008-11-04 16:06:57 +11:00
Andrew Bartlett
9381a78c39
Use ldb_dn_from_ldb_val to avoid possible over-run of the value.
...
The ldb_val is length-limited, and while normally NULL terminated,
this avoids the chance that this particular value might not be, as
well as avoiding a cast.
Andrew Bartlett
2008-11-04 16:06:56 +11:00
Jelmer Vernooij
37d885c51a
Remove iconv_convenience argument from convert_string{,talloc}() but
...
make them wrappers around convert_string{,talloc}_convenience().
2008-10-24 14:26:46 +02:00
Andrew Bartlett
99315a19be
Fix errrors in new password handling code found by RPC-SAMR.
...
I'm very glad we have such a comprehensive testsuite for the SAMR
password change process, as it makes this a much easier task to get
right.
Andrew Bartlett
2008-10-17 12:41:02 +11:00
Andrew Bartlett
7c88ea8aad
Create a 'straight paper path' for UTF16 passwords.
...
This uses a virtual attribute 'clearTextPassword' (name chosen to
match references in MS-SAMR) that contains the length-limited blob
containing an allegidly UTF16 password. This ensures we do no
validation or filtering of the password before we get a chance to MD4
it. We can then do the required munging into UTF8, and in future
implement the rules Microsoft has provided us with for invalid inputs.
All layers in the process now deal with the strings as length-limited
inputs, incluing the krb5 string2key calls.
This commit also includes a small change to samdb_result_passwords()
to ensure that LM passwords are not returned to the application logic
if LM authentication is disabled.
The objectClass module has been modified to allow the
clearTextPassword attribute to pass down the stack.
Andrew Bartlett
2008-10-16 12:48:16 +11:00
Günther Deschner
11ecd5acfd
s4: merge from s3 samr.idl.
...
Guenther
2008-10-15 17:42:33 +02:00
Jelmer Vernooij
9565999755
Fix include paths to new location of libutil.
2008-10-11 21:31:42 +02:00
Jelmer Vernooij
6925202bde
Move source4/lib/crypto to lib/crypto.
2008-09-24 15:30:23 +02:00
Simo Sorce
508527890a
Merge ldb_search() and ldb_search_exp_fmt() into a simgle function.
...
The previous ldb_search() interface made it way too easy to leak results,
and being able to use a printf-like expression turns to be really useful.
2008-09-23 18:17:46 -04:00