patch for logon time on samba3.0 alpha22

[Andrew Bartlett]

On Thu, 2003-03-20 at 08:56, jra at dp.samba.org wrote:
> On Thu, Mar 20, 2003 at 08:36:10AM +1100, Andrew Bartlett wrote:
> > On Thu, 2003-03-20 at 01:38, Jianliang Lu wrote:
> > > Hi,
> > > I've patched the samba3.0 alpha22 for logon_time, now the user's logon time 
> > > is updated when he logs on successfully.
> > > In attachment is the patch.
> > 
> > Does NT do this only for file-share connects?  Or also for Domain
> > logons?
> > 
> > If domain logons also trigger it, then the correct place is
> > 'auth/auth_sam.c'.  But watch out, we probably need an option to disable
> > this, as in some PDC/BDC setups, it could entail an expensive LDAP
> > update over a WAN.
> > 
> > But nice work - it's the kind of detail I've been meaning to catch up on
> > for a while.
> 
> Yep - looks good, although not the place I'd put it. I'm looking
> at adding the code into the auth system to implement the Windows
> account restrictions (unless it's there in 3.0 and I haven't
> found it yet, which is possible :-).

auth/auth_sam.c has some of these already - but read sam_account_ok()
and you will see what is left to be done.

A big one is 'logonHours' - we need to store this into LDAP and check it
here.

Andrew Bartlett
-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030320/40a7c288/attachment.bin