svn commit: samba r18710 - in branches/SAMBA_3_0/source/nsswitch: .

[gd at samba.org]

Author: gd
Date: 2006-09-20 07:18:30 +0000 (Wed, 20 Sep 2006)
New Revision: 18710

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=18710

Log:
Prevent that our offline cache can get outdated after a password change.

Guenther

Modified:
   branches/SAMBA_3_0/source/nsswitch/winbindd_pam.c


Changeset:
Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_pam.c
===================================================================
--- branches/SAMBA_3_0/source/nsswitch/winbindd_pam.c	2006-09-20 07:15:42 UTC (rev 18709)
+++ branches/SAMBA_3_0/source/nsswitch/winbindd_pam.c	2006-09-20 07:18:30 UTC (rev 18710)
@@ -2098,7 +2098,14 @@
 		  (unsigned long)state->pid,
 		  state->request.data.chng_pswd_auth_crap.domain,
 		  state->request.data.chng_pswd_auth_crap.user));
-	
+
+	if (lp_winbind_offline_logon()) {
+		DEBUG(0,("Refusing password change as winbind offline logons are enabled. "));
+		DEBUGADD(0,("Changing passwords here would risk inconsistent logons\n"));
+		result = NT_STATUS_ACCESS_DENIED;
+		goto done;
+	}
+
 	if (*state->request.data.chng_pswd_auth_crap.domain) {
 		fstrcpy(domain,state->request.data.chng_pswd_auth_crap.domain);
 	} else {