Only allow SeMachineAccountPrivilege on machine accounts

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrew Bartlett wrote:

| This patch restricts their operation to resetting
| only the passwords of workstations.  This better matches
| what I was expecting, and I hope it matches windows better.

Andrew,

After looking at this some more, I'm not sure it is quite
correct.  It prevents any administrative user_info changes
unless it is a machine account and the connected user
posseses the SeMachineAccountPrivilege right.

This means that root can no longer set passwords for
users either.  I'm going to clean this up and check it in.
Let me know if you see any problems with the patch.




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFB97Y7IR7qMdg1EfYRAuRMAJwP+WYG2eNEt4SESXZ4MmOaQVkGgACgkjow
3ng4NzY4JCvqw6rDw9+pJK4=
=HG0B
-----END PGP SIGNATURE-----