password API needed

[Jeremy Allison]

Gerald Carter wrote:
> 
> On Fri, 22 May 1998, Luke Kenneth Casson Leighton wrote:
> 
> > there are checks in password.c and smbpasswd.c to check that there exists
> > a unix account for the smb (nt) user with same name / same unix uid.
> >
> > is this done through a single function, for consistency?  _should_ it?
> > should NIS+ be added ("passwd.org_dir") or is the standard getpwnam()
> > sufficient?
> >
> 
> getpwnam() should work.
> 

Indeed - getpwnam is the standard POSIX function for
getting account information from the UNIX password db.
(Although in Samba we wrap it in Get_Pwnam() to cope 
with braindead clients that mangle username case).

I'd prefer to keep these check separate for now, although
adding a common function do the standard checks isn't
a bad idea, password.c is security sensitive code, and
needs changing carefully (this means by all means go ahead
Luke, but bear in mind I'll be scrutinizing *any* change
in there in *minute* detail :-).

Cheers,

	Jeremy.


-- 
--------------------------------------------------------
Buying an operating system without source is like buying
a self-assembly Space Shuttle with no instructions.
--------------------------------------------------------