summaryrefslogtreecommitdiff
path: root/source3/nsswitch/pam_winbind.h
diff options
context:
space:
mode:
authorGünther Deschner <gd@samba.org>2006-04-11 14:40:53 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 11:15:58 -0500
commit9608b4328d9ffd4b8d38e1dc872f68d80dd1cc22 (patch)
treec2386da4e526aebc8cdb15f177822ff2e0b3ff04 /source3/nsswitch/pam_winbind.h
parentf340b2fa367d7a888c0dc24ff57f2aed7e9c88bb (diff)
downloadsamba-9608b4328d9ffd4b8d38e1dc872f68d80dd1cc22.tar.gz
samba-9608b4328d9ffd4b8d38e1dc872f68d80dd1cc22.tar.bz2
samba-9608b4328d9ffd4b8d38e1dc872f68d80dd1cc22.zip
r15038: Replace all code in pam_winbind that relied on access to samba
internals, mostly with the code that was in pam_winbind before. Also switch from using loadparm to use iniParser to read the new pam_winbind options from a configuration file. That still uses the old (parametric) option names which will be replaced next (as iniParser does not support parametric options). Guenther (This used to be commit 6f668ce67318f17bba79cd98b5d169cd19eafcd4)
Diffstat (limited to 'source3/nsswitch/pam_winbind.h')
-rw-r--r--source3/nsswitch/pam_winbind.h22
1 files changed, 21 insertions, 1 deletions
diff --git a/source3/nsswitch/pam_winbind.h b/source3/nsswitch/pam_winbind.h
index 54150be8b3..8d2239aa11 100644
--- a/source3/nsswitch/pam_winbind.h
+++ b/source3/nsswitch/pam_winbind.h
@@ -26,6 +26,8 @@
#define PAM_SM_ACCOUNT
#define PAM_SM_PASSWORD
+#include <iniparser.h>
+
#if defined(SUNOS5) || defined(SUNOS4) || defined(HPUX) || defined(FREEBSD) || defined(AIX)
/* Solaris always uses dynamic pam modules */
@@ -87,6 +89,7 @@ do { \
#define WINBIND_KRB5_AUTH (1<<7)
#define WINBIND_KRB5_CCACHE_TYPE (1<<8)
#define WINBIND_CACHED_LOGIN (1<<9)
+#define WINBIND_CONFIG_FILE (1<<10)
/*
* here is the string to inform the user that the new passwords they
@@ -107,6 +110,8 @@ do { \
#include "winbind_client.h"
+#include <dynconfig.h>
+
#define PAM_WB_REMARK_DIRECT(h,x)\
{\
const char *error_string = NULL; \
@@ -134,7 +139,7 @@ do { \
{\
const char *ntstatus = x.data.auth.nt_status_string; \
const char *error_string = NULL; \
- if (strequal(ntstatus,y)) {\
+ if (!strcasecmp(ntstatus,y)) {\
error_string = _get_ntstatus_error_string(y);\
if (error_string != NULL) {\
_make_remark(h, PAM_ERROR_MSG, error_string);\
@@ -148,3 +153,18 @@ do { \
return ret;\
};\
};
+
+/* from include/rpc_samr.h */
+#define DOMAIN_PASSWORD_COMPLEX 0x00000001
+
+#define REJECT_REASON_OTHER 0x00000000
+#define REJECT_REASON_TOO_SHORT 0x00000001
+#define REJECT_REASON_IN_HISTORY 0x00000002
+#define REJECT_REASON_NOT_COMPLEX 0x00000005
+
+/* from include/smb.h */
+#define ACB_PWNOEXP 0x00000200
+
+/* from include/rpc_netlogon.h */
+#define LOGON_CACHED_ACCOUNT 0x00000004
+