Jeremy Allison 9333bbeb76 Fixed up the change password bug when not using PAM. ...

The problem is we were trying to use mask_match as a generic
wildcard matcher for UNIX strings (like the password prompts).
We can't do that - we need a unix_wild_match (re-added into lib/util.c)
as the ms_fnmatch semantics for empty strings are completely wrong.
This caused partial reads to be accepted as correct passwd change
responses when they were not....
Also added paranioa test to stop passwd change being done as root
with no %u in the passwd program string.
Jeremy.

-

..

ldap.c

Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.

-

machine_sid.c

Use lp_private_dir() not magic on the lp_smb_passwd_file() output.

-

nispass.c

Started a cleanup of smbpasswd related stuff. I've created a new file

-

pampass.c

Fixed up the change password bug when not using PAM.

-

pass_check.c

Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.

-

passdb.c

Fixed the bug with member servers in a Samba PDC hosted domain not allowing

-

passgrp.c

Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.

-

pdb_ldap.c

Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.

-

pdb_nisplus.c

Fixed the bug with member servers in a Samba PDC hosted domain not allowing

-

pdb_smbpasswd.c

Fixed the bug with member servers in a Samba PDC hosted domain not allowing

-

pdb_tdb.c

- fix handling of 0 last_change_time and must_change_time

-

secrets.c

move to SAFE_FREE()

-

smbpasschange.c

Large commit which restructures the local password storage API.

-

smbpassgroup.c

Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.

-