samba.git/source3/rpc_server/samr, branch master

Update mailing list references to point at lists.samba.org

2015-02-10T06:08:28+00:00

The mailing lists are on lists.samba.org, but there are many references that use the shorthand of samba.org

Some references to samba@ have been changed to samba-technical@ where this make more sense.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Garming Sam 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Tue Feb 10 07:08:28 CET 2015 on sn-devel-104

lib: Split out sys_[read|write] & friends

2014-12-06T23:12:07+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

s3: lib: Signal handling - ensure smbrun and change password code save and restore existing SIGCHLD handlers.

2014-09-30T18:40:16+00:00

Bug #10831 - SIGCLD Signal handler not correctly reinstalled on old library code use - smbrun etc.

https://bugzilla.samba.org/show_bug.cgi?id=10831

Signed-off-by: Jeremy Allison 
Reviewed-by: Martin Schwenke

s3: Use root_mode() to get uid_wrapper working correctly.

2014-04-17T12:56:06+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

s3-samr: Refuse to set lockout_duration < lockout_window per rpc.samr.passwords.lockout

2014-04-02T15:12:45+00:00

This was not noticed previously because the test was not run.

Andrew Bartlett

Change-Id: I88701b6c3057ec26f44b3ccab4134ac9aabe552a
Signed-off-by: Stefan Metzmacher 
Reviewed-by: Stefan Metzmacher

CVE-2013-4496:samr: Remove ChangePasswordUser

2014-03-13T09:26:03+00:00

This old password change mechanism does not provide the plaintext to
validate against password complexity, and it is not used by modern
clients.  It also has quite difficult semantics to handle regarding
password lockout.

The missing features in both implementations (by design) were:

 - the password complexity checks (no plaintext)
 - the minimum password length (no plaintext)

Additionally, the source3 version did not check:

 - the minimum password age
 - pdb_get_pass_can_change() which checks the security
   descriptor for the 'user cannot change password' setting.
 - the password history
 - the output of the 'passwd program' if 'unix passwd sync = yes'.

Finally, the mechanism was almost useless, as it was incorrectly
only made available to administrative users with permission
to reset the password.  It is removed here so that it is not
mistakenly reinstated in the future.

Andrew Bartlett

Bug: https://bugzilla.samba.org/show_bug.cgi?id=10245

Change-Id: If2edd3183c177e5ff37c9511b0d0ad0dd9038c66
Signed-off-by: Andrew Bartlett 
Reviewed-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher 
Reviewed-on: https://gerrit.samba.org/37

CVE-2013-4496:s3-samr: Block attempts to crack passwords via repeated password changes

2014-03-13T09:21:16+00:00

Bug: https://bugzilla.samba.org/show_bug.cgi?id=10245

Change-Id: Ic31774275f07e003e7c2682a856ccb2d5a7939de
Signed-off-by: Andrew Bartlett 
Signed-off-by: Stefan Metzmacher 
Signed-off-by: Jeremy Allison 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison 
Reviewed-on: https://gerrit.samba.org/162

param: rename lp function and variable from "serverstring" to "server_string"

2014-02-08T00:19:11+00:00

Signed-off-by: Garming Sam 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Jeremy Allison

s3:rpc_server: s/event_add_timed/tevent_add_timer

2013-02-19T22:48:02+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Michael Adam

s3:rpc_server: s/struct timed_event/struct tevent_timer

2013-02-19T22:47:57+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Michael Adam