Changeset 480 for trunk/server/source3/passdb/secrets.c

Timestamp:

Aug 2, 2010, 8:16:45 PM (15 years ago)

Author:

Silvan Scherrer

Message:

Samba Server 3.5: trunk update to 3.5.4

Location:

trunk/server

Files:

• . (modified) (1 prop)
• source3/passdb/secrets.c (modified) (5 diffs)

trunk/server/source3/passdb/secrets.c

@@ -325 +325 @@
 
 /**
+ * Form a key for fetching the machine previous trust account password
+ *
+ * @param domain domain name
+ *
+ * @return keystring
+ **/
+static const char *machine_prev_password_keystr(const char *domain)
+{
+        char *keystr;
+
+        keystr = talloc_asprintf_strupper_m(talloc_tos(), "%s/%s",
+                                            SECRETS_MACHINE_PASSWORD_PREV, domain);
+        SMB_ASSERT(keystr != NULL);
+        return keystr;
+}
+
+/**
  * Form a key for fetching the machine trust account password
  *
@@ -572 +589 @@
 
 /************************************************************************
- Routine to delete the plaintext machine account password
+ Routine to delete the old plaintext machine account password if any
+************************************************************************/
+
+static bool secrets_delete_prev_machine_password(const char *domain)
+{
+        char *oldpass = (char *)secrets_fetch(machine_prev_password_keystr(domain), NULL);
+        if (oldpass == NULL) {
+                return true;
+        }
+        SAFE_FREE(oldpass);
+        return secrets_delete(machine_prev_password_keystr(domain));
+}
+
+/************************************************************************
+ Routine to delete the plaintext machine account password and old
+ password if any
 ************************************************************************/
 
 bool secrets_delete_machine_password(const char *domain)
 {
+        if (!secrets_delete_prev_machine_password(domain)) {
+                return false;
+        }
         return secrets_delete(machine_password_keystr(domain));
 }
 
 /************************************************************************
- Routine to delete the plaintext machine account password, sec channel type and
- last change time from secrets database
+ Routine to delete the plaintext machine account password, old password,
+ sec channel type and last change time from secrets database
 ************************************************************************/
 
 bool secrets_delete_machine_password_ex(const char *domain)
 {
+        if (!secrets_delete_prev_machine_password(domain)) {
+                return false;
+        }
         if (!secrets_delete(machine_password_keystr(domain))) {
                 return false;
@@ -606 +644 @@
 
 /************************************************************************
+ Routine to store the previous machine password (by storing the current password
+ as the old)
+************************************************************************/
+
+static bool secrets_store_prev_machine_password(const char *domain)
+{
+        char *oldpass;
+        bool ret;
+
+        oldpass = (char *)secrets_fetch(machine_password_keystr(domain), NULL);
+        if (oldpass == NULL) {
+                return true;
+        }
+        ret = secrets_store(machine_prev_password_keystr(domain), oldpass, strlen(oldpass)+1);
+        SAFE_FREE(oldpass);
+        return ret;
+}
+
+/************************************************************************
  Routine to set the plaintext machine account password for a realm
-the password is assumed to be a null terminated ascii string
+ the password is assumed to be a null terminated ascii string.
+ Before storing
 ************************************************************************/
 
@@ -617 +675 @@
         uint32 sec_channel_type;
 
+        if (!secrets_store_prev_machine_password(domain)) {
+                return false;
+        }
+
         ret = secrets_store(machine_password_keystr(domain), pass, strlen(pass)+1);
         if (!ret)
@@ -628 +690 @@
 
         return ret;
+}
+
+
+/************************************************************************
+ Routine to fetch the previous plaintext machine account password for a realm
+ the password is assumed to be a null terminated ascii string.
+************************************************************************/
+
+char *secrets_fetch_prev_machine_password(const char *domain)
+{
+        return (char *)secrets_fetch(machine_prev_password_keystr(domain), NULL);
 }