mirror of
https://github.com/samba-team/samba.git
synced 2024-12-22 13:34:15 +03:00
698d28ee8c
Checks password against default quality and length standards when it is entered, allowing a second chance to enter one (if interactive), rather than running through the provisioning process and bailing on an exception Includes unit tests for the newly-added python wrapper of check_password_quality plus black-box tests for the checks in samba-tool. Breaks an openldap test which uses an invalid password. BUG: https://bugzilla.samba.org/show_bug.cgi?id=9710 BUG: https://bugzilla.samba.org/show_bug.cgi?id=12235 Signed-off-by: Jamie McClymont <jamiemcclymont@catalyst.net.nz> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
95 lines
1.9 KiB
Plaintext
95 lines
1.9 KiB
Plaintext
###############################
|
|
# Domain Naming Context
|
|
###############################
|
|
dn: ${DOMAINDN}
|
|
changetype: modify
|
|
-
|
|
# This should be 0x0001, but the 0 byte is not allowed - therefore encoded
|
|
replace: auditingPolicy
|
|
auditingPolicy:: AAE=
|
|
-
|
|
replace: creationTime
|
|
creationTime: ${CREATTIME}
|
|
-
|
|
# "dSCorePropagationDate" should contain the provision data
|
|
replace: forceLogoff
|
|
forceLogoff: -9223372036854775808
|
|
-
|
|
# "fSMORoleOwner" filled in later
|
|
replace: gPLink
|
|
gPLink: [LDAP://CN={${POLICYGUID}},CN=Policies,CN=System,${DOMAINDN};0]
|
|
-
|
|
replace: isCriticalSystemObject
|
|
isCriticalSystemObject: TRUE
|
|
-
|
|
replace: lockoutDuration
|
|
lockoutDuration: -18000000000
|
|
-
|
|
replace: lockOutObservationWindow
|
|
lockOutObservationWindow: -18000000000
|
|
-
|
|
replace: lockoutThreshold
|
|
lockoutThreshold: 0
|
|
-
|
|
# "masteredBy" filled in later
|
|
replace: maxPwdAge
|
|
maxPwdAge: -36288000000000
|
|
-
|
|
replace: minPwdAge
|
|
minPwdAge: -864000000000
|
|
-
|
|
replace: minPwdLength
|
|
minPwdLength: ${MIN_PWD_LENGTH}
|
|
-
|
|
replace: modifiedCount
|
|
modifiedCount: 1
|
|
-
|
|
replace: modifiedCountAtLastProm
|
|
modifiedCountAtLastProm: 0
|
|
-
|
|
replace: msDS-AllUsersTrustQuota
|
|
msDS-AllUsersTrustQuota: 1000
|
|
-
|
|
replace: msDS-Behavior-Version
|
|
msDS-Behavior-Version: ${DOMAIN_FUNCTIONALITY}
|
|
-
|
|
replace: ms-DS-MachineAccountQuota
|
|
ms-DS-MachineAccountQuota: 10
|
|
-
|
|
# "msDs-masteredBy" filled in later
|
|
replace: msDS-NcType
|
|
msDS-NcType: 0
|
|
-
|
|
replace: msDS-PerUserTrustQuota
|
|
msDS-PerUserTrustQuota: 1
|
|
-
|
|
replace: msDS-PerUserTrustTombstonesQuota
|
|
msDS-PerUserTrustTombstonesQuota: 10
|
|
-
|
|
replace: nextRid
|
|
nextRid: ${NEXTRID}
|
|
-
|
|
replace: nTMixedDomain
|
|
nTMixedDomain: 0
|
|
-
|
|
# This does only exist in SAMBA
|
|
replace: oEMInformation
|
|
oEMInformation: Provisioned by SAMBA ${SAMBA_VERSION_STRING}
|
|
-
|
|
replace: pwdProperties
|
|
pwdProperties: 1
|
|
-
|
|
replace: pwdHistoryLength
|
|
pwdHistoryLength: 24
|
|
-
|
|
replace: serverState
|
|
serverState: 1
|
|
-
|
|
replace: systemFlags
|
|
systemFlags: -1946157056
|
|
-
|
|
replace: uASCompat
|
|
uASCompat: 1
|
|
-
|
|
|