diff options
| author | Günther Deschner <gd@samba.org> | 2007-01-11 15:41:02 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 12:17:02 -0500 |
| commit | 0d538f7370f13b175f127f061d5bff18e631cd5e (patch) | |
| tree | 6ed7999cab70207a63907d17c2184e033acd335c /source3/nsswitch/pam_winbind.h | |
| parent | b79629fcc431764f1ec34876e7a28e242d205ac8 (diff) | |
| download | samba-0d538f7370f13b175f127f061d5bff18e631cd5e.tar.gz samba-0d538f7370f13b175f127f061d5bff18e631cd5e.tar.bz2 samba-0d538f7370f13b175f127f061d5bff18e631cd5e.zip | |
r20687: Implement grace logons for offline authentications in pam_winbind.
In case a user authenticated sucessfully and his password just expired
while beeing disconnected, we should allow a user to logon (given a
clear warning). We currently forced the user into a password change
dialogue in that scenario; this did not make much sense while offline.
Guenther
(This used to be commit 668b278653acfc4de7807834988f7af557e608a5)
Diffstat (limited to 'source3/nsswitch/pam_winbind.h')
| -rw-r--r-- | source3/nsswitch/pam_winbind.h | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/source3/nsswitch/pam_winbind.h b/source3/nsswitch/pam_winbind.h index e817c5a840..87307d740d 100644 --- a/source3/nsswitch/pam_winbind.h +++ b/source3/nsswitch/pam_winbind.h @@ -164,4 +164,7 @@ do { \ /* from include/rpc_netlogon.h */ #define LOGON_CACHED_ACCOUNT 0x00000004 +#define LOGON_GRACE_LOGON 0x01000000 +#define PAM_WB_CACHED_LOGON(x) (x & LOGON_CACHED_ACCOUNT) +#define PAM_WB_GRACE_LOGON(x) ((LOGON_CACHED_ACCOUNT|LOGON_GRACE_LOGON) == ( x & (LOGON_CACHED_ACCOUNT|LOGON_GRACE_LOGON))) |