| commit | fb4679638d03a555c722c08ee1de121fc8ff23f1 | |
| author | Michael Adam <obnox@samba.org> | |
| Wed, 20 Jan 2010 16:54:40 +0000 (20 17:54 +0100) | ||
| committer | Michael Adam <obnox@samba.org> | |
| Thu, 21 Jan 2010 12:01:24 +0000 (21 13:01 +0100) | ||
| tree | 9dec00065ddd137cdae13974bc55d9ae2f3ada60 | treesnapshot (tar.gz zip) |
| parent | 24d4433bd75366774945ed59c0043428dedea4ba | commitdiff |
s4:rpc-server:samr: fix setting of lockout duration < lockout window
This should return NT_STATUS_INVALID_PARAMETER.
This makes samba pass the first part of the samr-lockout test.
This constraint is documented here for the samr server:
http://msdn.microsoft.com/en-us/library/cc245667%28PROT.10%29.aspx
MS-SAMR 3.1.1.6 Attribute Constraints for Originating Updates
and here for the ldap backend:
http://msdn.microsoft.com/en-us/library/cc223462(PROT.10).aspx
MS-ADTS 3.1.1.5.3.2 Constraints
So the check should actually be moved down into the backend,
i.e. under dsdb/samdb/ldb_modules - TODO..
Michael
This should return NT_STATUS_INVALID_PARAMETER.
This makes samba pass the first part of the samr-lockout test.
This constraint is documented here for the samr server:
http://msdn.microsoft.com/en-us/library/cc245667%28PROT.10%29.aspx
MS-SAMR 3.1.1.6 Attribute Constraints for Originating Updates
and here for the ldap backend:
http://msdn.microsoft.com/en-us/library/cc223462(PROT.10).aspx
MS-ADTS 3.1.1.5.3.2 Constraints
So the check should actually be moved down into the backend,
i.e. under dsdb/samdb/ldb_modules - TODO..
Michael
| source4/rpc_server/samr/dcesrv_samr.c | diffblobblamehistory |