2 * Unix SMB/CIFS implementation.
3 * account policy storage
4 * Copyright (C) Jean François Micouleau 1998-2001.
5 * Copyright (C) Andrew Bartlett 2002
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License as published by
9 * the Free Software Foundation; either version 2 of the License, or
10 * (at your option) any later version.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
23 static TDB_CONTEXT
*tdb
; /* used for driver files */
25 #define DATABASE_VERSION 1
27 /****************************************************************************
28 Open the account policy tdb.
29 ****************************************************************************/
31 BOOL
init_account_policy(void)
33 const char *vstring
= "INFO/version";
38 tdb
= tdb_open_log(lock_path("account_policy.tdb"), 0, TDB_DEFAULT
, O_RDWR
|O_CREAT
, 0600);
40 DEBUG(0,("Failed to open account policy database\n"));
44 /* handle a Samba upgrade */
45 tdb_lock_bystring(tdb
, vstring
,0);
46 if (!tdb_fetch_uint32(tdb
, vstring
, &version
) || version
!= DATABASE_VERSION
) {
47 tdb_traverse(tdb
, tdb_traverse_delete_fn
, NULL
);
48 tdb_store_uint32(tdb
, vstring
, DATABASE_VERSION
);
50 account_policy_set(AP_MIN_PASSWORD_LEN
, MINPASSWDLENGTH
); /* 5 chars minimum */
51 account_policy_set(AP_PASSWORD_HISTORY
, 0); /* don't keep any old password */
52 account_policy_set(AP_USER_MUST_LOGON_TO_CHG_PASS
, 0); /* don't force user to logon */
53 account_policy_set(AP_MAX_PASSWORD_AGE
, (uint32
)-1); /* don't expire */
54 account_policy_set(AP_MIN_PASSWORD_AGE
, 0); /* 0 days */
55 account_policy_set(AP_LOCK_ACCOUNT_DURATION
, 30); /* lockout for 30 minutes */
56 account_policy_set(AP_RESET_COUNT_TIME
, 30); /* reset after 30 minutes */
57 account_policy_set(AP_BAD_ATTEMPT_LOCKOUT
, 0); /* don't lockout */
58 account_policy_set(AP_TIME_TO_LOGOUT
, -1); /* don't force logout */
60 tdb_unlock_bystring(tdb
, vstring
);
68 } account_policy_names
[] = {
69 {AP_MIN_PASSWORD_LEN
, "min password length"},
70 {AP_PASSWORD_HISTORY
, "password history"},
71 {AP_USER_MUST_LOGON_TO_CHG_PASS
, "user must logon to change password"},
72 {AP_MAX_PASSWORD_AGE
, "maximum password age"},
73 {AP_MIN_PASSWORD_AGE
,"minimum password age"},
74 {AP_LOCK_ACCOUNT_DURATION
, "lockout duration"},
75 {AP_RESET_COUNT_TIME
, "reset count minutes"},
76 {AP_BAD_ATTEMPT_LOCKOUT
, "bad lockout attempt"},
77 {AP_TIME_TO_LOGOUT
, "disconnect time"},
81 char *account_policy_names_list(void)
87 for (i
=0; account_policy_names
[i
].string
; i
++) {
88 len
+= strlen(account_policy_names
[i
].string
) + 1;
96 for (i
=0; account_policy_names
[i
].string
; i
++) {
97 memcpy(p
, account_policy_names
[i
].string
, strlen(account_policy_names
[i
].string
) + 1);
98 p
[strlen(account_policy_names
[i
].string
)] = '\n';
99 p
+= strlen(account_policy_names
[i
].string
) + 1;
105 /****************************************************************************
106 Get the account policy name as a string from its #define'ed number
107 ****************************************************************************/
109 static const char *decode_account_policy_name(int field
)
112 for (i
=0; account_policy_names
[i
].string
; i
++) {
113 if (field
== account_policy_names
[i
].field
)
114 return account_policy_names
[i
].string
;
120 /****************************************************************************
121 Get the account policy name as a string from its #define'ed number
122 ****************************************************************************/
124 int account_policy_name_to_fieldnum(const char *name
)
127 for (i
=0; account_policy_names
[i
].string
; i
++) {
128 if (strcmp(name
, account_policy_names
[i
].string
) == 0)
129 return account_policy_names
[i
].field
;
135 /****************************************************************************
136 ****************************************************************************/
138 BOOL
account_policy_get(int field
, uint32
*value
)
142 if(!init_account_policy())return False
;
146 fstrcpy(name
, decode_account_policy_name(field
));
148 DEBUG(1, ("account_policy_get: Field %d is not a valid account policy type! Cannot get, returning 0.\n", field
));
151 if (!tdb_fetch_uint32(tdb
, name
, value
)) {
152 DEBUG(1, ("account_policy_get: tdb_fetch_uint32 failed for efild %d (%s), returning 0", field
, name
));
155 DEBUG(10,("account_policy_get: %s:%d\n", name
, *value
));
160 /****************************************************************************
161 ****************************************************************************/
162 BOOL
account_policy_set(int field
, uint32 value
)
166 if(!init_account_policy())return False
;
168 fstrcpy(name
, decode_account_policy_name(field
));
170 DEBUG(1, ("Field %d is not a valid account policy type! Cannot set.\n", field
));
174 if (!tdb_store_uint32(tdb
, name
, value
)) {
175 DEBUG(1, ("tdb_store_uint32 failed for field %d (%s) on value %u", field
, name
, value
));
179 DEBUG(10,("account_policy_set: %s:%d\n", name
, value
));