sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Code
15c793fa34
samba-mirror/source4/auth/samba_server_gensec.c

78 lines
2.3 KiB
C
Raw Normal View History

Remove auth/ntlm as a dependency of GENSEC by means of function pointers. When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2009-02-13 02:24:16 +03:00
/*
Unix SMB/CIFS implementation.
Generic Authentication Interface for Samba Servers
Copyright (C) Andrew Bartlett <abartlet@samba.org> 2009
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
/* This code sets up GENSEC in the way that all Samba servers want
* (becaue they have presumed access to the sam.ldb etc */
#include "includes.h"
#include "auth/auth.h"
#include "auth/gensec/gensec.h"
#include "param/param.h"
NTSTATUS samba_server_gensec_start(TALLOC_CTX *mem_ctx,
struct tevent_context *event_ctx,
s4-messaging Rename messaging -> imessaging This avoid symbol and structure conflicts between Samba3 and Samba4, and chooses a less generic name. Andrew Bartlett
2011-05-03 04:40:33 +04:00
struct imessaging_context *msg_ctx,
Remove auth/ntlm as a dependency of GENSEC by means of function pointers. When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2009-02-13 02:24:16 +03:00
struct loadparm_context *lp_ctx,
struct cli_credentials *server_credentials,
const char *target_service,
struct gensec_security **gensec_context)
{
NTSTATUS nt_status;
struct gensec_security *gensec_ctx;
s4-auth Rename auth -> auth4 to avoid conflict with s3 auth
2011-05-07 10:14:06 +04:00
struct auth4_context *auth_context;
s4-gensec Don't steal the auth_context, reference it. We don't want to steal this pointer away from the caller if it's been set up from python. Andrew Bartlett
2011-01-17 08:20:09 +03:00
TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
if (!tmp_ctx) {
return NT_STATUS_NO_MEMORY;
}
Remove auth/ntlm as a dependency of GENSEC by means of function pointers. When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2009-02-13 02:24:16 +03:00
s4-gensec Don't steal the auth_context, reference it. We don't want to steal this pointer away from the caller if it's been set up from python. Andrew Bartlett
2011-01-17 08:20:09 +03:00
nt_status = auth_context_create(tmp_ctx,
Remove auth/ntlm as a dependency of GENSEC by means of function pointers. When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2009-02-13 02:24:16 +03:00
event_ctx,
msg_ctx,
lp_ctx,
&auth_context);
if (!NT_STATUS_IS_OK(nt_status)) {
DEBUG(1, ("Failed to start auth server code: %s\n", nt_errstr(nt_status)));
s4-gensec Don't steal the auth_context, reference it. We don't want to steal this pointer away from the caller if it's been set up from python. Andrew Bartlett
2011-01-17 08:20:09 +03:00
talloc_free(tmp_ctx);
Remove auth/ntlm as a dependency of GENSEC by means of function pointers. When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2009-02-13 02:24:16 +03:00
return nt_status;
}
s4-gensec Don't steal the auth_context, reference it. We don't want to steal this pointer away from the caller if it's been set up from python. Andrew Bartlett
2011-01-17 08:20:09 +03:00
nt_status = gensec_server_start(tmp_ctx,
s4-loadparm: 2nd half of lp_ to lpcfg_ conversion this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-07-16 08:32:42 +04:00
lpcfg_gensec_settings(mem_ctx, lp_ctx),
Remove auth/ntlm as a dependency of GENSEC by means of function pointers. When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2009-02-13 02:24:16 +03:00
auth_context,
&gensec_ctx);
if (!NT_STATUS_IS_OK(nt_status)) {
s4-gensec Don't steal the auth_context, reference it. We don't want to steal this pointer away from the caller if it's been set up from python. Andrew Bartlett
2011-01-17 08:20:09 +03:00
talloc_free(tmp_ctx);
Remove auth/ntlm as a dependency of GENSEC by means of function pointers. When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2009-02-13 02:24:16 +03:00
DEBUG(1, ("Failed to start GENSEC server code: %s\n", nt_errstr(nt_status)));
return nt_status;
}
gensec_set_credentials(gensec_ctx, server_credentials);
if (target_service) {
gensec_set_target_service(gensec_ctx, target_service);
}
s4-gensec Don't steal the auth_context, reference it. We don't want to steal this pointer away from the caller if it's been set up from python. Andrew Bartlett
2011-01-17 08:20:09 +03:00
*gensec_context = talloc_steal(mem_ctx, gensec_ctx);
talloc_free(tmp_ctx);
Remove auth/ntlm as a dependency of GENSEC by means of function pointers. When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2009-02-13 02:24:16 +03:00
return nt_status;
}
Copy Permalink