- dce/rpc code

- removed debug info in struni2 and unistr2 (security risk)

- rpc_pipe function was getting pointer to data then calling realloc *dur*

- password check function, the start of "credential checking",
  user, wks, domain, pass as the credentials (not just user,pass which
  is incorrect in a domain context)

- cli_write needs to return ssize_t not size_t, because total can be -1
  if the write fails.

- fixed signed / unsigned warnings (how come i don't get those any more
  when i compile with gcc???)

- nt password change added in smbd.  yes, jeremy, i verified that the
  SMBtrans2 version still works.
(This used to be commit fcfb40d2b0fc565ee4f66b3a3761c246366a2ef3)

1 files changed, 6 insertions, 2 deletions

diff --git a/source3/rpc_server/srv_samr.c b/source3/rpc_server/srv_samr.c
index a3d758489c..1b159cd65d 100644
--- a/source3/rpc_server/srv_samr.c
+++ b/source3/rpc_server/srv_samr.c
@@ -735,8 +735,12 @@ static void samr_reply_chgpasswd_user(SAMR_Q_CHGPASSWD_USER *q_u,
 
 	DEBUG(5,("samr_chgpasswd_user: user: %s wks: %s\n", user_name, wks));
 
-	/* oops! */
-	status = 0xC0000000 | NT_STATUS_NO_SUCH_USER;
+	if (!pass_oem_change(user_name,
+	                     q_u->lm_newpass.pass, q_u->lm_oldhash.hash,
+	                     q_u->nt_newpass.pass, q_u->nt_oldhash.hash))
+	{
+		status = 0xC0000000 | NT_STATUS_WRONG_PASSWORD;
+	}
 
 	make_samr_r_chgpasswd_user(&r_u, status);