Andrew Bartlett 1144addec5 dsdb: No longer supply exact password hashes in a control to indicate password changes ...

This returns the API for password changes via (eg) kpasswd to the
previous design as at 7eebcebbab8f62935bd1d5460e58b0a8f2cc30e8
where a control but no partiuclar values were specified.

This avoids the issues that were attempted to be addressed between
7eebcebbab8f62935bd1d5460e58b0a8f2cc30e8 and 786c41b0954b541518d1096019e1ce7ca11e5e98
by still keeping the ACL check from 23bd3a74176be4a1f8d6d70b148ababee397cf8c.

The purpose of this change is to move away from the NT hash (unicodePwd) being
the primary password in Samba, to allow installations to operate without this
unsalted hash.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

2022-03-17 01:57:38 +00:00

..

dcesrv_samr.c

CVE-2021-3738 s4:rpc_server/samr: make use of dcesrv_samdb_connect_as_*() helper

2021-11-09 20:37:30 +00:00

dcesrv_samr.h

rpc samr: EnumDomainUsers perf improvement

2019-08-30 07:08:36 +00:00

samr_password.c

dsdb: No longer supply exact password hashes in a control to indicate password changes

2022-03-17 01:57:38 +00:00