Date:   Wed Sep 25 11:34:31 2002
Author: abartlet

Update of /data/cvs/samba/source/passdb
In directory dp.samba.org:/tmp/cvs-serv16211/passdb

Modified Files:
        passdb.c pdb_get_set.c pdb_ldap.c 
Log Message:
This patch from "Stefan (metze) Metzmacher" <[EMAIL PROTECTED]> cleans up
pdb_ldap and adds a 'ldap passwd sync' option.  

The idea with this option is to do allow an ldap backend to do all the fancy
password hashing etc - and to tell smbd no to try and double-up.  Using 'ldap
passwd sync = only' will do this, but is not recommended unless such a backend
is in place...

Running 'ldap passwd sync = yes' just gets you the same as doing 'pam passwd
sync = yes' and having both PAM and pam_ldap correctly configured for 'magic
root' behaviour, but only using ldap connection, and one set of credentials.

This also gets us closer to allowing ldap to say 'password too short' etc,
which might assist in maintaining a consistant password policy.

Andrew Bartlett


Revisions:
passdb.c                1.171 => 1.172
        
http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/passdb.c?r1=1.171&r2=1.172
pdb_get_set.c           1.17 => 1.18
        
http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_get_set.c?r1=1.17&r2=1.18
pdb_ldap.c              1.55 => 1.56
        
http://www.samba.org/cgi-bin/cvsweb/samba/source/passdb/pdb_ldap.c?r1=1.55&r2=1.56

Reply via email to