summaryrefslogtreecommitdiff
path: root/source3/lib/account_pol.c
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r18182: only grant privs to Administrators if privileges are enabled to ↵Gerald Carter1-2/+5
avoid bopgus error messages (This used to be commit 7d5356fd5db6ece2504c9c140d1f454056be7164)
2007-10-10r17334: Some C++ warningsVolker Lendecke1-1/+1
(This used to be commit 8ae7ed1f3cecbb5285313d17b5f9511e2e622f0b)
2007-10-10r16945: Sync trunk -> 3.0 for 3.0.24 code. Still needJeremy Allison1-4/+12
to do the upper layer directories but this is what everyone is waiting for.... Jeremy. (This used to be commit 9dafb7f48ca3e7af956b0a7d1720c2546fc4cfb8)
2007-10-10r15101: Little step towards getting Samba4 tdb into 3: tdb_lock_bystring ↵Volker Lendecke1-1/+1
does not have the timeout argument in Samba4. Add a new routine tdb_lock_bystring_with_timeout. Volker (This used to be commit b9c6e3f55602fa505859a4b2cd137b74105d685f)
2007-10-10r14432: Give in and grant BUILT\Administrators all privilegesGerald Carter1-1/+6
(This used to be commit b6170910604dba6533b727de8d7f0cc75256d14f)
2007-10-10r12398: adding Guenther's account policy migration fixGerald Carter1-12/+73
(This used to be commit be32f10609f2274903cb3b2c6b84c9aa62962151)
2007-10-10r10656: BIG merge from trunk. Features not copied overGerald Carter1-97/+275
* \PIPE\unixinfo * winbindd's {group,alias}membership new functions * winbindd's lookupsids() functionality * swat (trunk changes to be reverted as per discussion with Deryck) (This used to be commit 939c3cb5d78e3a2236209b296aa8aba8bdce32d3)
2007-10-10r6263: Get rid of generate_wellknown_sids, they are const static and ↵Volker Lendecke1-8/+0
initializable statically. Volker (This used to be commit 3493d9f383567d286e69c0e60c0708ed400a04d9)
2007-10-10r6166: Derell, I'm reverting this part of -r4917 because it modifies the keysGünther Deschner1-2/+2
to search in tdbs in a way that is not upgrade-safe and somewhat weird to use: Users have to modify policies like pdbedit -P "maximum password policies (seconds since 1970)" The value-description should better go into the manpage. Guenther (This used to be commit f46c0c12274cd0bf1c24bc2d1d708b2960433195)
2007-10-10r5349: After talking with Jerry, reverted the addition of account policies toGünther Deschner1-325/+99
passdb in 3_0 (they are still in trunk). Guenther (This used to be commit fdf9bdbbac1d8d4f3b3e1fc7e49c1e659b9301b1)
2007-10-10r5235: Fix compile warning.Günther Deschner1-1/+1
(This used to be commit 00b5990617b341b1fe7863552acb02e30cd022e5)
2007-10-10r4925: Migrate Account Policies to passdb (esp. replicating ldapsam).Günther Deschner1-99/+325
Does automated migration from account_policy.tdb v1 and v2 and offers a pdbedit-Migration interface. Jerry, please feel free to revert that if you have other plans. Guenther (This used to be commit 75af83dfcd8ef365b4b1180453060ae5176389f5)
2007-10-10r4917: Merge some of Derrell.Lipman@UnwiredUniverse.com obvious fixes.Jeremy Allison1-2/+2
Added text explaining units in pdbedit time fields. Jeremy. (This used to be commit 3d09c15d8f06ad06fae362291a6c986f7b6107e6)
2007-10-10r4724: Add support for Windows privileges in Samba 3.0Gerald Carter1-1/+33
(based on Simo's code in trunk). Rewritten with the following changes: * privilege set is based on a 32-bit mask instead of strings (plans are to extend this to a 64 or 128-bit mask before the next 3.0.11preX release). * Remove the privilege code from the passdb API (replication to come later) * Only support the minimum amount of privileges that make sense. * Rewrite the domain join checks to use the SeMachineAccountPrivilege instead of the 'is a member of "Domain Admins"?' check that started all this. Still todo: * Utilize the SePrintOperatorPrivilege in addition to the 'printer admin' parameter * Utilize the SeAddUserPrivilege for adding users and groups * Fix some of the hard coded _lsa_*() calls * Start work on enough of SAM replication to get privileges from one Samba DC to another. * Come up with some management tool for manipultaing privileges instead of user manager since it is buggy when run on a 2k client (haven't tried xp). Works ok on NT4. (This used to be commit 77c10ff9aa6414a31eece6dfec00793f190a9d6c)
2007-10-10r4651: Add "refuse machine password change" policy field. This update will justJim McDonough1-14/+52
return the appropriate reg value. Enforcement to be added soon. Also, fix account policy tdb upgrade so it doesn't just wipe out everything that was in there from a a previous version. (This used to be commit ccae934cf9de4b234bac324b8d878c8ec7862f67)
2007-10-10r4088: Get medieval on our ass about malloc.... :-). Take control of all our ↵Jeremy Allison1-1/+1
allocation functions so we can funnel through some well known functions. Should help greatly with malloc checking. HEAD patch to follow. Jeremy. (This used to be commit 620f2e608f70ba92f032720c031283d295c5c06a)
2007-10-10r3940: typo.Günther Deschner1-1/+1
Guenther (This used to be commit 412ff4a129c5e719aa4d4e4856500ff59c82b939)
2007-10-10r3561: Since we have tdb_reopen_all() after all forks, the local_pid logic ↵Volker Lendecke1-4/+1
is not correct anymore. If we actually open the tdb before the fork, we end up opening the tdb twice. Jerry, jra, this also happens in the locking and printing subsystems. You might want to check it there (not that it actually happens right now, but this gave me some confusion lately...). Volker (This used to be commit 40cad9dcc14ddec0ce74bb9010d13bd82e4d10af)
2007-10-10r1412: Fix password history list in tdbsam. Fix some memory leaks. AddJeremy Allison1-2/+25
my (C) to a header file that was at least 50% mine :-). Jeremy. (This used to be commit 8ee6060977ec8e65082f3ad09e1e1ccf5b4672ed)
2004-02-20Make default lockout duration and reset count time 30 minutes, to match ↵Jim McDonough1-2/+2
windows, and also be valid (0 was invalid) (This used to be commit 7ff42fffb2b207aea1dba306c914c7e09994d608)
2003-07-25Fix bug #184; set max_pw_age in account_pol to -1 so the default is never to ↵Gerald Carter1-1/+1
expire (This used to be commit 833bc5c06018043cf0eb6bdcbb96922964286559)
2003-04-28Whitespace syncup.Tim Potter1-4/+2
(This used to be commit 7fd7af121ee8ba4f9540394f64fe3c78e2e96cd2)
2003-04-23Don't try to continue if initialisation fails (merge from HEAD)Andrew Bartlett1-2/+4
(This used to be commit ff3ec67e120d29db2b85ce444ce89a205ea7a067)
2003-01-03Merge from HEAD - make Samba compile with -Wwrite-strings without additionalAndrew Bartlett1-2/+2
warnings. (Adds a lot of const). Andrew Bartlett (This used to be commit 3a7458f9472432ef12c43008414925fd1ce8ea0c)
2002-10-04Add a timeout to tdb_lock_bystring(). Ensure we never have more thanJeremy Allison1-1/+1
MAX_PRINT_JOBS in a queue. Jeremy. (This used to be commit 9fe3c0b90d4bff2217e3cb5a34b4683ca314c06e)
2002-09-25sync'ing up for 3.0alpha20 releaseGerald Carter1-2/+2
(This used to be commit 65e7b5273bb58802bf0c389b77f7fcae0a1f6139)
2002-08-17sync 3.0 branch with headJelmer Vernooij1-26/+62
(This used to be commit 3928578b52cfc949be5e0ef444fce1558d75f290)
2002-01-30Removed version number from file header.Tim Potter1-2/+1
Changed "SMB/Netbios" to "SMB/CIFS" in file header. (This used to be commit 6a58c9bd06d0d7502a24bf5ce5a2faf0a146edfa)
2002-01-09Fixed all uses of tdb_fetch/store/_int to use explicit int32 little endianJeremy Allison1-7/+8
in tdb's. All except winbindd_idmap.... Hmmmmmm. Jeremy. (This used to be commit ec71f1732b6b27bd2d65b250a6f3720a235dc38d)
2002-01-03Fixed nasty cast of tdb_delete in traversals.Jeremy Allison1-1/+1
Jeremy. (This used to be commit a0cdec3acc82d1ce0292fadd4b8dac23638450f3)
2001-12-31more irix -64 portability fixesAndrew Tridgell1-10/+0
(This used to be commit 65e857b36e170e3ecd78bf6695ae73342e9c04cd)
2001-12-31- portablitity fixes for cc -64 on irixAndrew Tridgell1-2/+2
- fixed gid* bug in rpc_server (This used to be commit 48aa90c48c5f0e3054c4acdc49668e222e7c0d36)
2001-12-04moved init_account_policy() to the right placeAndrew Tridgell1-1/+5
(This used to be commit e908f304a26b9f1100e301610151a9334bf117b0)
2001-12-03added a tdb to store the account policy informations.Jean-François Micouleau1-0/+132
You can change them with either usermanager->policies->account or from a command prompt on NT/W2K: net accounts /domain we can add a rpc accounts to the net command. As the net_rpc.c is still empty, I did not start. How should I add command to it ? Should I take the rpcclient/cmd_xxx functions and call them from there ? alse changed the SAM_UNK_INFO_3 parser, it's an NTTIME. This one is more for jeremy ;-) J.F. (This used to be commit bc28a8eebd9245ce3004ae4b1a359db51f77bf21)
generated by cgit (git 2.34.1) at 2024-12-30 18:22:30 +0000