diff options
| author | Matthieu Patou <mat@matws.net> | 2010-05-21 11:57:29 +0400 |
|---|---|---|
| committer | Günther Deschner <gd@samba.org> | 2010-06-02 14:32:23 +0200 |
| commit | 57ab910b6f3a24bf188415baf58de610203594b1 (patch) | |
| tree | df32dc663dbbda02d4a76bc92b935d6ba58f81ae /source3/include | |
| parent | 95863bfb5e547132c8f02c49a2bed1ec308d8f5e (diff) | |
| download | samba-57ab910b6f3a24bf188415baf58de610203594b1.tar.gz samba-57ab910b6f3a24bf188415baf58de610203594b1.tar.bz2 samba-57ab910b6f3a24bf188415baf58de610203594b1.zip | |
s3: Allow previous password to be stored and use it to check tickets
This patch is to fix bug 7099. It stores the current password in the
previous password key when the password is changed. It also check the
user ticket against previous password.
Signed-off-by: Günther Deschner <gd@samba.org>
Diffstat (limited to 'source3/include')
| -rw-r--r-- | source3/include/proto.h | 1 | ||||
| -rw-r--r-- | source3/include/secrets.h | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/source3/include/proto.h b/source3/include/proto.h index cb6856734e..6ccefe1a39 100644 --- a/source3/include/proto.h +++ b/source3/include/proto.h @@ -4645,6 +4645,7 @@ bool secrets_delete_machine_password(const char *domain); bool secrets_delete_machine_password_ex(const char *domain); bool secrets_delete_domain_sid(const char *domain); bool secrets_store_machine_password(const char *pass, const char *domain, enum netr_SchannelType sec_channel); +char *secrets_fetch_prev_machine_password(const char *domain); char *secrets_fetch_machine_password(const char *domain, time_t *pass_last_set_time, enum netr_SchannelType *channel); diff --git a/source3/include/secrets.h b/source3/include/secrets.h index b51fd22bfa..624b1465bb 100644 --- a/source3/include/secrets.h +++ b/source3/include/secrets.h @@ -25,6 +25,7 @@ */ #define SECRETS_MACHINE_ACCT_PASS "SECRETS/$MACHINE.ACC" #define SECRETS_MACHINE_PASSWORD "SECRETS/MACHINE_PASSWORD" +#define SECRETS_MACHINE_PASSWORD_PREV "SECRETS/MACHINE_PASSWORD.PREV" #define SECRETS_MACHINE_LAST_CHANGE_TIME "SECRETS/MACHINE_LAST_CHANGE_TIME" #define SECRETS_MACHINE_SEC_CHANNEL_TYPE "SECRETS/MACHINE_SEC_CHANNEL_TYPE" #define SECRETS_MACHINE_TRUST_ACCOUNT_NAME "SECRETS/SECRETS_MACHINE_TRUST_ACCOUNT_NAME" |