summaryrefslogtreecommitdiffstats
path: root/source/lib/account_pol.c
Commit message (Collapse)AuthorAgeFilesLines
* r6263: Get rid of generate_wellknown_sids, they are const static and ↵Volker Lendecke2005-04-091-8/+0
| | | | | | | | initializable statically. Volker
* r6166: Derell, I'm reverting this part of -r4917 because it modifies the keysGünther Deschner2005-04-011-2/+2
| | | | | | | | | | | to search in tdbs in a way that is not upgrade-safe and somewhat weird to use: Users have to modify policies like pdbedit -P "maximum password policies (seconds since 1970)" The value-description should better go into the manpage. Guenther
* r5349: After talking with Jerry, reverted the addition of account policies toGünther Deschner2005-02-121-325/+99
| | | | | | passdb in 3_0 (they are still in trunk). Guenther
* r5235: Fix compile warning.Günther Deschner2005-02-041-1/+1
|
* r4925: Migrate Account Policies to passdb (esp. replicating ldapsam).Günther Deschner2005-01-221-99/+325
| | | | | | | | Does automated migration from account_policy.tdb v1 and v2 and offers a pdbedit-Migration interface. Jerry, please feel free to revert that if you have other plans. Guenther
* r4917: Merge some of Derrell.Lipman@UnwiredUniverse.com obvious fixes.Jeremy Allison2005-01-221-2/+2
| | | | | Added text explaining units in pdbedit time fields. Jeremy.
* r4724: Add support for Windows privileges in Samba 3.0Gerald Carter2005-01-131-1/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | (based on Simo's code in trunk). Rewritten with the following changes: * privilege set is based on a 32-bit mask instead of strings (plans are to extend this to a 64 or 128-bit mask before the next 3.0.11preX release). * Remove the privilege code from the passdb API (replication to come later) * Only support the minimum amount of privileges that make sense. * Rewrite the domain join checks to use the SeMachineAccountPrivilege instead of the 'is a member of "Domain Admins"?' check that started all this. Still todo: * Utilize the SePrintOperatorPrivilege in addition to the 'printer admin' parameter * Utilize the SeAddUserPrivilege for adding users and groups * Fix some of the hard coded _lsa_*() calls * Start work on enough of SAM replication to get privileges from one Samba DC to another. * Come up with some management tool for manipultaing privileges instead of user manager since it is buggy when run on a 2k client (haven't tried xp). Works ok on NT4.
* r4651: Add "refuse machine password change" policy field. This update will justJim McDonough2005-01-101-14/+52
| | | | | | | return the appropriate reg value. Enforcement to be added soon. Also, fix account policy tdb upgrade so it doesn't just wipe out everything that was in there from a a previous version.
* r4088: Get medieval on our ass about malloc.... :-). Take control of all our ↵Jeremy Allison2004-12-071-1/+1
| | | | | | | | | allocation functions so we can funnel through some well known functions. Should help greatly with malloc checking. HEAD patch to follow. Jeremy.
* r3940: typo.Günther Deschner2004-11-241-1/+1
| | | | Guenther
* r3561: Since we have tdb_reopen_all() after all forks, the local_pid logic ↵Volker Lendecke2004-11-051-4/+1
| | | | | | | | | | | is not correct anymore. If we actually open the tdb before the fork, we end up opening the tdb twice. Jerry, jra, this also happens in the locking and printing subsystems. You might want to check it there (not that it actually happens right now, but this gave me some confusion lately...). Volker
* r1412: Fix password history list in tdbsam. Fix some memory leaks. AddJeremy Allison2004-07-081-2/+25
| | | | | my (C) to a header file that was at least 50% mine :-). Jeremy.
* r2: import HEAD into svn+ssh://svn.samba.org/home/svn/samba/trunkCVS Import User2004-04-041-0/+162
metze