diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2009-06-18 12:33:46 +1000 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2009-06-18 13:49:30 +1000 |
| commit | 58e8db912d2213a594714ac29866396098662557 (patch) | |
| tree | 1fba34e4ef93aa73e9839ad876460e6aa157a2fb /source4/libnet/libnet_passwd.c | |
| parent | 19413c52495877d54c90c60229568d0077fda30b (diff) | |
| download | samba-58e8db912d2213a594714ac29866396098662557.tar.gz samba-58e8db912d2213a594714ac29866396098662557.tar.bz2 samba-58e8db912d2213a594714ac29866396098662557.zip | |
s4:libnet Allow 'net password change' to work on expired passwords
We need to pass down flags to the DCE/RPC layer to allow fallback to
anonymous connections, as we can't log in with an expired password.
The anonymous connection can then change the password with SAMR.
Andrew Bartlett
Diffstat (limited to 'source4/libnet/libnet_passwd.c')
| -rw-r--r-- | source4/libnet/libnet_passwd.c | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/source4/libnet/libnet_passwd.c b/source4/libnet/libnet_passwd.c index 2c96916937..e558c93d75 100644 --- a/source4/libnet/libnet_passwd.c +++ b/source4/libnet/libnet_passwd.c @@ -53,10 +53,13 @@ static NTSTATUS libnet_ChangePassword_samr(struct libnet_context *ctx, TALLOC_CT struct samr_DomInfo1 *dominfo = NULL; struct samr_ChangeReject *reject = NULL; + ZERO_STRUCT(c); + /* prepare connect to the SAMR pipe of the users domain PDC */ c.level = LIBNET_RPC_CONNECT_PDC; c.in.name = r->samr.in.domain_name; c.in.dcerpc_iface = &ndr_table_samr; + c.in.dcerpc_flags = DCERPC_ANON_FALLBACK; /* 1. connect to the SAMR pipe of users domain PDC (maybe a standalone server or workstation) */ status = libnet_RpcConnect(ctx, mem_ctx, &c); @@ -504,11 +507,12 @@ static NTSTATUS libnet_SetPassword_samr(struct libnet_context *ctx, TALLOC_CTX * struct policy_handle u_handle; union libnet_SetPassword r2; + ZERO_STRUCT(c); /* prepare connect to the SAMR pipe of users domain PDC */ c.level = LIBNET_RPC_CONNECT_PDC; c.in.name = r->samr.in.domain_name; c.in.dcerpc_iface = &ndr_table_samr; - + /* 1. connect to the SAMR pipe of users domain PDC (maybe a standalone server or workstation) */ status = libnet_RpcConnect(ctx, mem_ctx, &c); if (!NT_STATUS_IS_OK(status)) { |