s4:rpc-server:samr: fix setting of lockout duration < lockout window
commitfb4679638d03a555c722c08ee1de121fc8ff23f1
authorMichael Adam <obnox@samba.org>
Wed, 20 Jan 2010 16:54:40 +0000 (20 17:54 +0100)
committerMichael Adam <obnox@samba.org>
Thu, 21 Jan 2010 12:01:24 +0000 (21 13:01 +0100)
tree9dec00065ddd137cdae13974bc55d9ae2f3ada60
parent24d4433bd75366774945ed59c0043428dedea4ba
s4:rpc-server:samr: fix setting of lockout duration < lockout window

This should return NT_STATUS_INVALID_PARAMETER.
This makes samba pass the first part of the samr-lockout test.

This constraint is documented here for the samr server:
http://msdn.microsoft.com/en-us/library/cc245667%28PROT.10%29.aspx
MS-SAMR 3.1.1.6 Attribute Constraints for Originating Updates

and here for the ldap backend:
http://msdn.microsoft.com/en-us/library/cc223462(PROT.10).aspx
MS-ADTS 3.1.1.5.3.2 Constraints

So the check should actually be moved down into the backend,
i.e. under dsdb/samdb/ldb_modules - TODO..

Michael
source4/rpc_server/samr/dcesrv_samr.c