2004-06-20 04:58:09 +04:00
/*
Unix SMB / CIFS implementation .
Generic Authentication Interface
Copyright ( C ) Andrew Tridgell 2003
r6028: A MAJOR update to intergrate the new credentails system fully with
GENSEC, and to pull SCHANNEL into GENSEC, by making it less 'special'.
GENSEC now no longer has it's own handling of 'set username' etc,
instead it uses cli_credentials calls.
In order to link the credentails code right though Samba, a lot of
interfaces have changed to remove 'username, domain, password'
arguments, and these have been replaced with a single 'struct
cli_credentials'.
In the session setup code, a new parameter 'workgroup' contains the
client/server current workgroup, which seems unrelated to the
authentication exchange (it was being filled in from the auth info).
This allows in particular kerberos to only call back for passwords
when it actually needs to perform the kinit.
The kerberos code has been modified not to use the SPNEGO provided
'principal name' (in the mechListMIC), but to instead use the name the
host was connected to as. This better matches Microsoft behaviour,
is more secure and allows better use of standard kerberos functions.
To achieve this, I made changes to our socket code so that the
hostname (before name resolution) is now recorded on the socket.
In schannel, most of the code from librpc/rpc/dcerpc_schannel.c is now
in libcli/auth/schannel.c, and it looks much more like a standard
GENSEC module. The actual sign/seal code moved to
libcli/auth/schannel_sign.c in a previous commit.
The schannel credentails structure is now merged with the rest of the
credentails, as many of the values (username, workstation, domain)
where already present there. This makes handling this in a generic
manner much easier, as there is no longer a custom entry-point.
The auth_domain module continues to be developed, but is now just as
functional as auth_winbind. The changes here are consequential to the
schannel changes.
The only removed function at this point is the RPC-LOGIN test
(simulating the load of a WinXP login), which needs much more work to
clean it up (it contains copies of too much code from all over the
torture suite, and I havn't been able to penetrate its 'structure').
Andrew Bartlett
(This used to be commit 2301a4b38a21aa60917973451687063d83d18d66)
2005-03-24 07:14:06 +03:00
Copyright ( C ) Andrew Bartlett < abartlet @ samba . org > 2004 - 2005
2004-06-20 04:58:09 +04:00
This program is free software ; you can redistribute it and / or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation ; either version 2 of the License , or
( at your option ) any later version .
This program is distributed in the hope that it will be useful ,
but WITHOUT ANY WARRANTY ; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
GNU General Public License for more details .
You should have received a copy of the GNU General Public License
along with this program ; if not , write to the Free Software
Foundation , Inc . , 675 Mass Ave , Cambridge , MA 0213 9 , USA .
*/
# include "includes.h"
2004-11-02 05:57:18 +03:00
# include "auth/auth.h"
2005-06-16 15:36:09 +04:00
# include "lib/events/events.h"
2006-02-23 15:48:13 +03:00
# include "build.h"
2006-03-18 18:42:57 +03:00
# include "librpc/rpc/dcerpc.h"
2004-06-20 04:58:09 +04:00
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
/* the list of currently registered GENSEC backends */
2006-01-28 15:15:24 +03:00
static struct gensec_security_ops * * generic_security_ops ;
2004-08-11 20:13:25 +04:00
static int gensec_num_backends ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
2006-01-28 15:15:24 +03:00
/* Return all the registered mechs. Don't modify the return pointer,
* but you may talloc_reference it if convient */
struct gensec_security_ops * * gensec_security_all ( void )
2005-12-05 06:20:40 +03:00
{
return generic_security_ops ;
}
2006-01-28 15:15:24 +03:00
/* Sometimes we want to force only kerberos, sometimes we want to
* force it ' s avoidance . The old list could be either
* gensec_security_all ( ) , or from cli_credentials_gensec_list ( ) ( ie ,
* an existing list we have trimmed down ) */
struct gensec_security_ops * * gensec_use_kerberos_mechs ( TALLOC_CTX * mem_ctx ,
struct gensec_security_ops * * old_gensec_list ,
enum credentials_use_kerberos use_kerberos )
{
struct gensec_security_ops * * new_gensec_list ;
int i , j , num_mechs_in ;
if ( use_kerberos = = CRED_AUTO_USE_KERBEROS ) {
talloc_reference ( mem_ctx , old_gensec_list ) ;
return old_gensec_list ;
}
for ( num_mechs_in = 0 ; old_gensec_list & & old_gensec_list [ num_mechs_in ] ; num_mechs_in + + ) {
/* noop */
}
new_gensec_list = talloc_array ( mem_ctx , struct gensec_security_ops * , num_mechs_in + 1 ) ;
if ( ! new_gensec_list ) {
return NULL ;
}
j = 0 ;
for ( i = 0 ; old_gensec_list & & old_gensec_list [ i ] ; i + + ) {
int oid_idx ;
for ( oid_idx = 0 ; old_gensec_list [ i ] - > oid & & old_gensec_list [ i ] - > oid [ oid_idx ] ; oid_idx + + ) {
if ( strcmp ( old_gensec_list [ i ] - > oid [ oid_idx ] , GENSEC_OID_SPNEGO ) = = 0 ) {
new_gensec_list [ j ] = old_gensec_list [ i ] ;
j + + ;
break ;
}
}
switch ( use_kerberos ) {
case CRED_DONT_USE_KERBEROS :
if ( old_gensec_list [ i ] - > kerberos = = False ) {
new_gensec_list [ j ] = old_gensec_list [ i ] ;
j + + ;
}
break ;
case CRED_MUST_USE_KERBEROS :
if ( old_gensec_list [ i ] - > kerberos = = True ) {
new_gensec_list [ j ] = old_gensec_list [ i ] ;
j + + ;
}
break ;
case CRED_AUTO_USE_KERBEROS :
break ;
}
}
new_gensec_list [ j ] = NULL ;
return new_gensec_list ;
}
struct gensec_security_ops * * gensec_security_mechs ( struct gensec_security * gensec_security ,
TALLOC_CTX * mem_ctx )
{
struct gensec_security_ops * * backends ;
backends = gensec_security_all ( ) ;
if ( ! gensec_security ) {
talloc_reference ( mem_ctx , backends ) ;
return backends ;
} else {
2006-01-31 04:48:07 +03:00
enum credentials_use_kerberos use_kerberos ;
2006-01-28 15:15:24 +03:00
struct cli_credentials * creds = gensec_get_credentials ( gensec_security ) ;
2006-01-31 04:48:07 +03:00
if ( ! creds ) {
talloc_reference ( mem_ctx , backends ) ;
return backends ;
}
use_kerberos = cli_credentials_get_kerberos_state ( creds ) ;
2006-01-28 15:15:24 +03:00
return gensec_use_kerberos_mechs ( mem_ctx , backends , use_kerberos ) ;
}
}
2005-12-05 06:20:40 +03:00
static const struct gensec_security_ops * gensec_security_by_authtype ( struct gensec_security * gensec_security ,
uint8_t auth_type )
2004-06-20 04:58:09 +04:00
{
int i ;
2006-01-28 15:15:24 +03:00
struct gensec_security_ops * * backends ;
const struct gensec_security_ops * backend ;
TALLOC_CTX * mem_ctx = talloc_new ( gensec_security ) ;
if ( ! mem_ctx ) {
return NULL ;
2005-12-05 06:20:40 +03:00
}
2006-01-28 15:15:24 +03:00
backends = gensec_security_mechs ( gensec_security , mem_ctx ) ;
2005-12-05 06:20:40 +03:00
for ( i = 0 ; backends & & backends [ i ] ; i + + ) {
if ( backends [ i ] - > auth_type = = auth_type ) {
2006-01-28 15:15:24 +03:00
backend = backends [ i ] ;
talloc_free ( mem_ctx ) ;
return backend ;
2004-06-20 04:58:09 +04:00
}
}
2006-01-28 15:15:24 +03:00
talloc_free ( mem_ctx ) ;
2004-06-20 04:58:09 +04:00
return NULL ;
}
2005-12-11 11:31:46 +03:00
const struct gensec_security_ops * gensec_security_by_oid ( struct gensec_security * gensec_security ,
const char * oid_string )
2004-06-20 04:58:09 +04:00
{
2005-05-16 03:42:11 +04:00
int i , j ;
2006-01-28 15:15:24 +03:00
struct gensec_security_ops * * backends ;
const struct gensec_security_ops * backend ;
TALLOC_CTX * mem_ctx = talloc_new ( gensec_security ) ;
if ( ! mem_ctx ) {
return NULL ;
2005-12-05 06:20:40 +03:00
}
2006-01-28 15:15:24 +03:00
backends = gensec_security_mechs ( gensec_security , mem_ctx ) ;
2005-12-05 06:20:40 +03:00
for ( i = 0 ; backends & & backends [ i ] ; i + + ) {
if ( backends [ i ] - > oid ) {
for ( j = 0 ; backends [ i ] - > oid [ j ] ; j + + ) {
if ( backends [ i ] - > oid [ j ] & &
( strcmp ( backends [ i ] - > oid [ j ] , oid_string ) = = 0 ) ) {
2006-01-28 15:15:24 +03:00
backend = backends [ i ] ;
talloc_free ( mem_ctx ) ;
return backend ;
2005-05-16 03:42:11 +04:00
}
}
2004-06-20 04:58:09 +04:00
}
}
2006-01-28 15:15:24 +03:00
talloc_free ( mem_ctx ) ;
2004-06-20 04:58:09 +04:00
return NULL ;
}
2005-12-05 06:20:40 +03:00
static const struct gensec_security_ops * gensec_security_by_sasl_name ( struct gensec_security * gensec_security ,
const char * sasl_name )
2004-06-20 04:58:09 +04:00
{
int i ;
2006-01-28 15:15:24 +03:00
struct gensec_security_ops * * backends ;
const struct gensec_security_ops * backend ;
TALLOC_CTX * mem_ctx = talloc_new ( gensec_security ) ;
if ( ! mem_ctx ) {
return NULL ;
2005-12-05 06:20:40 +03:00
}
2006-01-28 15:15:24 +03:00
backends = gensec_security_mechs ( gensec_security , mem_ctx ) ;
2005-12-05 06:20:40 +03:00
for ( i = 0 ; backends & & backends [ i ] ; i + + ) {
if ( backends [ i ] - > sasl_name
& & ( strcmp ( backends [ i ] - > sasl_name , sasl_name ) = = 0 ) ) {
2006-01-28 15:15:24 +03:00
backend = backends [ i ] ;
talloc_free ( mem_ctx ) ;
return backend ;
2004-06-20 04:58:09 +04:00
}
}
2006-01-28 15:15:24 +03:00
talloc_free ( mem_ctx ) ;
2004-06-20 04:58:09 +04:00
return NULL ;
}
2005-12-05 06:20:40 +03:00
static const struct gensec_security_ops * gensec_security_by_name ( struct gensec_security * gensec_security ,
const char * name )
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
{
int i ;
2006-01-28 15:15:24 +03:00
struct gensec_security_ops * * backends ;
const struct gensec_security_ops * backend ;
TALLOC_CTX * mem_ctx = talloc_new ( gensec_security ) ;
if ( ! mem_ctx ) {
return NULL ;
2005-12-05 06:20:40 +03:00
}
2006-01-28 15:15:24 +03:00
backends = gensec_security_mechs ( gensec_security , mem_ctx ) ;
2005-12-05 06:20:40 +03:00
for ( i = 0 ; backends & & backends [ i ] ; i + + ) {
if ( backends [ i ] - > name
& & ( strcmp ( backends [ i ] - > name , name ) = = 0 ) ) {
2006-01-28 15:15:24 +03:00
backend = backends [ i ] ;
talloc_free ( mem_ctx ) ;
return backend ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
}
}
2006-01-28 15:15:24 +03:00
talloc_free ( mem_ctx ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
return NULL ;
}
2005-11-05 14:02:37 +03:00
/**
* Return a unique list of security subsystems from those specified in
2005-12-05 06:20:40 +03:00
* the list of SASL names .
2005-11-05 14:02:37 +03:00
*
2005-12-05 06:20:40 +03:00
* Use the list of enabled GENSEC mechanisms from the credentials
* attached to the gensec_security , and return in our preferred order .
2005-11-05 14:02:37 +03:00
*/
2006-02-04 12:53:50 +03:00
const struct gensec_security_ops * * gensec_security_by_sasl_list ( struct gensec_security * gensec_security ,
TALLOC_CTX * mem_ctx ,
const char * * sasl_names )
2005-11-05 14:02:37 +03:00
{
const struct gensec_security_ops * * backends_out ;
2006-01-28 15:15:24 +03:00
struct gensec_security_ops * * backends ;
2005-11-05 14:02:37 +03:00
int i , k , sasl_idx ;
int num_backends_out = 0 ;
if ( ! sasl_names ) {
return NULL ;
}
2006-01-28 15:15:24 +03:00
backends = gensec_security_mechs ( gensec_security , mem_ctx ) ;
2005-11-05 14:02:37 +03:00
backends_out = talloc_array ( mem_ctx , const struct gensec_security_ops * , 1 ) ;
if ( ! backends_out ) {
return NULL ;
}
backends_out [ 0 ] = NULL ;
/* Find backends in our preferred order, by walking our list,
* then looking in the supplied list */
2005-12-05 06:20:40 +03:00
for ( i = 0 ; backends & & backends [ i ] ; i + + ) {
2005-11-05 14:02:37 +03:00
for ( sasl_idx = 0 ; sasl_names [ sasl_idx ] ; sasl_idx + + ) {
if ( ! backends [ i ] - > sasl_name | |
! ( strcmp ( backends [ i ] - > sasl_name ,
sasl_names [ sasl_idx ] ) = = 0 ) ) {
continue ;
}
for ( k = 0 ; backends_out [ k ] ; k + + ) {
if ( backends_out [ k ] = = backends [ i ] ) {
break ;
}
}
if ( k < num_backends_out ) {
/* already in there */
continue ;
}
backends_out = talloc_realloc ( mem_ctx , backends_out ,
const struct gensec_security_ops * ,
num_backends_out + 2 ) ;
if ( ! backends_out ) {
return NULL ;
}
backends_out [ num_backends_out ] = backends [ i ] ;
num_backends_out + + ;
backends_out [ num_backends_out ] = NULL ;
}
}
return backends_out ;
}
2005-05-16 03:42:11 +04:00
/**
* Return a unique list of security subsystems from those specified in
* the OID list . That is , where two OIDs refer to the same module ,
2005-12-05 06:20:40 +03:00
* return that module only once .
2005-05-16 03:42:11 +04:00
*
2005-12-05 06:20:40 +03:00
* Use the list of enabled GENSEC mechanisms from the credentials
* attached to the gensec_security , and return in our preferred order .
2005-05-16 03:42:11 +04:00
*/
2005-12-05 06:20:40 +03:00
const struct gensec_security_ops_wrapper * gensec_security_by_oid_list ( struct gensec_security * gensec_security ,
TALLOC_CTX * mem_ctx ,
2005-05-16 03:42:11 +04:00
const char * * oid_strings ,
const char * skip )
2004-08-11 20:13:25 +04:00
{
2005-05-16 03:42:11 +04:00
struct gensec_security_ops_wrapper * backends_out ;
2006-01-28 15:15:24 +03:00
struct gensec_security_ops * * backends ;
2005-05-16 03:42:11 +04:00
int i , j , k , oid_idx ;
int num_backends_out = 0 ;
if ( ! oid_strings ) {
return NULL ;
}
2006-01-28 15:15:24 +03:00
backends = gensec_security_mechs ( gensec_security , gensec_security ) ;
2005-05-16 03:42:11 +04:00
backends_out = talloc_array ( mem_ctx , struct gensec_security_ops_wrapper , 1 ) ;
if ( ! backends_out ) {
return NULL ;
}
backends_out [ 0 ] . op = NULL ;
backends_out [ 0 ] . oid = NULL ;
2005-11-05 14:02:37 +03:00
/* Find backends in our preferred order, by walking our list,
* then looking in the supplied list */
2005-12-05 06:20:40 +03:00
for ( i = 0 ; backends & & backends [ i ] ; i + + ) {
2005-11-05 14:02:37 +03:00
if ( ! backends [ i ] - > oid ) {
2005-05-16 03:42:11 +04:00
continue ;
}
2005-11-05 14:02:37 +03:00
for ( oid_idx = 0 ; oid_strings [ oid_idx ] ; oid_idx + + ) {
if ( strcmp ( oid_strings [ oid_idx ] , skip ) = = 0 ) {
2005-05-16 03:42:11 +04:00
continue ;
}
2005-11-05 14:02:37 +03:00
2005-05-16 03:42:11 +04:00
for ( j = 0 ; backends [ i ] - > oid [ j ] ; j + + ) {
if ( ! backends [ i ] - > oid [ j ] | |
! ( strcmp ( backends [ i ] - > oid [ j ] ,
oid_strings [ oid_idx ] ) = = 0 ) ) {
continue ;
}
for ( k = 0 ; backends_out [ k ] . op ; k + + ) {
if ( backends_out [ k ] . op = = backends [ i ] ) {
break ;
}
}
if ( k < num_backends_out ) {
/* already in there */
continue ;
}
backends_out = talloc_realloc ( mem_ctx , backends_out ,
struct gensec_security_ops_wrapper ,
num_backends_out + 2 ) ;
if ( ! backends_out ) {
return NULL ;
}
backends_out [ num_backends_out ] . op = backends [ i ] ;
backends_out [ num_backends_out ] . oid = backends [ i ] - > oid [ j ] ;
num_backends_out + + ;
backends_out [ num_backends_out ] . op = NULL ;
backends_out [ num_backends_out ] . oid = NULL ;
}
}
}
return backends_out ;
}
/**
* Return OIDS from the security subsystems listed
*/
const char * * gensec_security_oids_from_ops ( TALLOC_CTX * mem_ctx ,
2006-01-28 15:15:24 +03:00
struct gensec_security_ops * * ops ,
2005-05-16 03:42:11 +04:00
const char * skip )
{
int i ;
int j = 0 ;
int k ;
const char * * oid_list ;
2004-08-11 20:13:25 +04:00
if ( ! ops ) {
return NULL ;
}
2005-05-16 03:42:11 +04:00
oid_list = talloc_array ( mem_ctx , const char * , 1 ) ;
2004-08-11 20:13:25 +04:00
if ( ! oid_list ) {
return NULL ;
}
2005-12-05 06:20:40 +03:00
for ( i = 0 ; ops & & ops [ i ] ; i + + ) {
2004-08-11 20:13:25 +04:00
if ( ! ops [ i ] - > oid ) {
continue ;
}
2005-05-16 03:42:11 +04:00
for ( k = 0 ; ops [ i ] - > oid [ k ] ; k + + ) {
if ( skip & & strcmp ( skip , ops [ i ] - > oid [ k ] ) = = 0 ) {
} else {
oid_list = talloc_realloc ( mem_ctx , oid_list , const char * , j + 2 ) ;
if ( ! oid_list ) {
return NULL ;
}
oid_list [ j ] = ops [ i ] - > oid [ k ] ;
j + + ;
}
2004-08-11 20:13:25 +04:00
}
}
oid_list [ j ] = NULL ;
return oid_list ;
}
2005-05-16 03:42:11 +04:00
2005-08-20 10:14:14 +04:00
/**
* Return OIDS from the security subsystems listed
*/
const char * * gensec_security_oids_from_ops_wrapped ( TALLOC_CTX * mem_ctx ,
const struct gensec_security_ops_wrapper * wops )
{
int i ;
int j = 0 ;
int k ;
const char * * oid_list ;
if ( ! wops ) {
return NULL ;
}
oid_list = talloc_array ( mem_ctx , const char * , 1 ) ;
if ( ! oid_list ) {
return NULL ;
}
for ( i = 0 ; wops [ i ] . op ; i + + ) {
if ( ! wops [ i ] . op - > oid ) {
continue ;
}
for ( k = 0 ; wops [ i ] . op - > oid [ k ] ; k + + ) {
oid_list = talloc_realloc ( mem_ctx , oid_list , const char * , j + 2 ) ;
if ( ! oid_list ) {
return NULL ;
}
oid_list [ j ] = wops [ i ] . op - > oid [ k ] ;
j + + ;
}
}
oid_list [ j ] = NULL ;
return oid_list ;
}
2005-05-16 03:42:11 +04:00
/**
2005-12-05 06:20:40 +03:00
* Return all the security subsystems currently enabled on a GENSEC context .
*
* This is taken from a list attached to the cli_credentails , and
* skips the OID in ' skip ' . ( Typically the SPNEGO OID )
*
2005-05-16 03:42:11 +04:00
*/
2005-12-05 06:20:40 +03:00
const char * * gensec_security_oids ( struct gensec_security * gensec_security ,
TALLOC_CTX * mem_ctx ,
const char * skip )
2005-05-16 03:42:11 +04:00
{
2006-01-28 15:15:24 +03:00
struct gensec_security_ops * * ops
= gensec_security_mechs ( gensec_security , mem_ctx ) ;
2005-12-05 06:20:40 +03:00
return gensec_security_oids_from_ops ( mem_ctx , ops , skip ) ;
2005-05-16 03:42:11 +04:00
}
2005-01-05 06:21:45 +03:00
/**
Start the GENSEC system , returning a context pointer .
@ param mem_ctx The parent TALLOC memory context .
@ param gensec_security Returned GENSEC context pointer .
@ note The mem_ctx is only a parent and may be NULL .
2004-09-25 16:08:57 +04:00
*/
2005-06-16 15:36:09 +04:00
static NTSTATUS gensec_start ( TALLOC_CTX * mem_ctx ,
struct gensec_security * * gensec_security ,
struct event_context * ev )
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
{
2005-01-27 10:08:20 +03:00
( * gensec_security ) = talloc ( mem_ctx , struct gensec_security ) ;
2005-06-16 15:36:09 +04:00
NT_STATUS_HAVE_NO_MEMORY ( * gensec_security ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
( * gensec_security ) - > ops = NULL ;
2004-07-13 09:14:59 +04:00
ZERO_STRUCT ( ( * gensec_security ) - > target ) ;
2006-01-03 01:00:40 +03:00
ZERO_STRUCT ( ( * gensec_security ) - > peer_addr ) ;
ZERO_STRUCT ( ( * gensec_security ) - > my_addr ) ;
2004-07-13 09:14:59 +04:00
2004-07-06 06:59:05 +04:00
( * gensec_security ) - > subcontext = False ;
2004-08-25 06:25:20 +04:00
( * gensec_security ) - > want_features = 0 ;
2005-06-16 15:36:09 +04:00
if ( ev = = NULL ) {
ev = event_context_init ( * gensec_security ) ;
if ( ev = = NULL ) {
talloc_free ( * gensec_security ) ;
return NT_STATUS_NO_MEMORY ;
}
}
( * gensec_security ) - > event_ctx = ev ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
return NT_STATUS_OK ;
}
2004-07-06 06:59:05 +04:00
/**
* Start a GENSEC subcontext , with a copy of the properties of the parent
2005-01-05 06:21:45 +03:00
* @ param mem_ctx The parent TALLOC memory context .
* @ param parent The parent GENSEC context
* @ param gensec_security Returned GENSEC context pointer .
r5902: A rather large change...
I wanted to add a simple 'workstation' argument to the DCERPC
authenticated binding calls, but this patch kind of grew from there.
With SCHANNEL, the 'workstation' name (the netbios name of the client)
matters, as this is what ties the session between the NETLOGON ops and
the SCHANNEL bind. This changes a lot of files, and these will again
be changed when jelmer does the credentials work.
I also correct some schannel IDL to distinguish between workstation
names and account names. The distinction matters for domain trust
accounts.
Issues in handling this (issues with lifetime of talloc pointers)
caused me to change the 'creds_CredentialsState' and 'struct
dcerpc_binding' pointers to always be talloc()ed pointers.
In the schannel DB, we now store both the domain and computername, and
query on both. This should ensure we fault correctly when the domain
is specified incorrectly in the SCHANNEL bind.
In the RPC-SCHANNEL test, I finally fixed a bug that vl pointed out,
where the comment claimed we re-used a connection, but in fact we made
a new connection.
This was achived by breaking apart some of the
dcerpc_secondary_connection() logic.
The addition of workstation handling was also propogated to NTLMSSP
and GENSEC, for completeness.
The RPC-SAMSYNC test has been cleaned up a little, using a loop over
usernames/passwords rather than manually expanded tests. This will be
expanded further (the code in #if 0 in this patch) to use a newly
created user account for testing.
In making this test pass test_rpc.sh, I found a bug in the RPC-ECHO
server, caused by the removal of [ref] and the assoicated pointer from
the IDL. This has been re-added, until the underlying pidl issues are
solved.
(This used to be commit 824289dcc20908ddec957a4a892a103eec2da9b9)
2005-03-19 11:34:43 +03:00
* @ note Used by SPNEGO in particular , for the actual implementation mechanism
2004-07-06 06:59:05 +04:00
*/
2006-03-05 20:15:19 +03:00
_PUBLIC_ NTSTATUS gensec_subcontext_start ( TALLOC_CTX * mem_ctx ,
2004-12-24 12:54:23 +03:00
struct gensec_security * parent ,
2004-07-06 06:59:05 +04:00
struct gensec_security * * gensec_security )
{
2005-01-27 10:08:20 +03:00
( * gensec_security ) = talloc ( mem_ctx , struct gensec_security ) ;
2005-06-16 15:36:09 +04:00
NT_STATUS_HAVE_NO_MEMORY ( * gensec_security ) ;
2004-07-06 06:59:05 +04:00
( * * gensec_security ) = * parent ;
( * gensec_security ) - > ops = NULL ;
( * gensec_security ) - > private_data = NULL ;
( * gensec_security ) - > subcontext = True ;
2005-06-16 15:36:09 +04:00
( * gensec_security ) - > event_ctx = parent - > event_ctx ;
2004-07-06 06:59:05 +04:00
2004-07-06 18:42:07 +04:00
return NT_STATUS_OK ;
2004-07-06 06:59:05 +04:00
}
2005-01-05 06:21:45 +03:00
/**
Start the GENSEC system , in client mode , returning a context pointer .
@ param mem_ctx The parent TALLOC memory context .
@ param gensec_security Returned GENSEC context pointer .
@ note The mem_ctx is only a parent and may be NULL .
*/
2006-03-05 20:15:19 +03:00
_PUBLIC_ NTSTATUS gensec_client_start ( TALLOC_CTX * mem_ctx ,
2005-06-16 15:36:09 +04:00
struct gensec_security * * gensec_security ,
struct event_context * ev )
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
{
NTSTATUS status ;
2005-06-16 15:36:09 +04:00
status = gensec_start ( mem_ctx , gensec_security , ev ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
if ( ! NT_STATUS_IS_OK ( status ) ) {
return status ;
}
( * gensec_security ) - > gensec_role = GENSEC_CLIENT ;
return status ;
}
2005-01-05 06:21:45 +03:00
/**
Start the GENSEC system , in server mode , returning a context pointer .
@ param mem_ctx The parent TALLOC memory context .
@ param gensec_security Returned GENSEC context pointer .
@ note The mem_ctx is only a parent and may be NULL .
*/
2005-06-16 15:36:09 +04:00
NTSTATUS gensec_server_start ( TALLOC_CTX * mem_ctx ,
struct gensec_security * * gensec_security ,
struct event_context * ev )
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
{
NTSTATUS status ;
2005-06-16 15:36:09 +04:00
status = gensec_start ( mem_ctx , gensec_security , ev ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
if ( ! NT_STATUS_IS_OK ( status ) ) {
return status ;
}
( * gensec_security ) - > gensec_role = GENSEC_SERVER ;
return status ;
}
static NTSTATUS gensec_start_mech ( struct gensec_security * gensec_security )
{
NTSTATUS status ;
2004-07-13 09:14:59 +04:00
DEBUG ( 5 , ( " Starting GENSEC %smechanism %s \n " ,
gensec_security - > subcontext ? " sub " : " " ,
gensec_security - > ops - > name ) ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
switch ( gensec_security - > gensec_role ) {
case GENSEC_CLIENT :
if ( gensec_security - > ops - > client_start ) {
status = gensec_security - > ops - > client_start ( gensec_security ) ;
if ( ! NT_STATUS_IS_OK ( status ) ) {
2005-07-26 09:07:15 +04:00
DEBUG ( 2 , ( " Failed to start GENSEC client mech %s: %s \n " ,
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
gensec_security - > ops - > name , nt_errstr ( status ) ) ) ;
}
return status ;
}
2006-03-15 05:39:05 +03:00
break ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
case GENSEC_SERVER :
if ( gensec_security - > ops - > server_start ) {
status = gensec_security - > ops - > server_start ( gensec_security ) ;
if ( ! NT_STATUS_IS_OK ( status ) ) {
2004-11-08 05:43:49 +03:00
DEBUG ( 1 , ( " Failed to start GENSEC server mech %s: %s \n " ,
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
gensec_security - > ops - > name , nt_errstr ( status ) ) ) ;
}
return status ;
}
2006-03-15 05:39:05 +03:00
break ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
}
return NT_STATUS_INVALID_PARAMETER ;
}
2004-07-06 06:59:05 +04:00
/**
* Start a GENSEC sub - mechanism by DCERPC allocated ' auth type ' number
2005-01-05 06:21:45 +03:00
* @ param gensec_security GENSEC context pointer .
* @ param auth_type DCERPC auth type
* @ param auth_level DCERPC auth level
2004-07-06 06:59:05 +04:00
*/
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
NTSTATUS gensec_start_mech_by_authtype ( struct gensec_security * gensec_security ,
2004-08-25 06:25:20 +04:00
uint8_t auth_type , uint8_t auth_level )
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
{
2005-12-05 06:20:40 +03:00
gensec_security - > ops = gensec_security_by_authtype ( gensec_security , auth_type ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
if ( ! gensec_security - > ops ) {
2004-08-25 06:25:20 +04:00
DEBUG ( 3 , ( " Could not find GENSEC backend for auth_type=%d \n " , ( int ) auth_type ) ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
return NT_STATUS_INVALID_PARAMETER ;
}
2004-12-21 15:39:39 +03:00
gensec_want_feature ( gensec_security , GENSEC_FEATURE_DCE_STYLE ) ;
2005-08-20 10:14:14 +04:00
gensec_want_feature ( gensec_security , GENSEC_FEATURE_ASYNC_REPLIES ) ;
2004-08-25 06:25:20 +04:00
if ( auth_level = = DCERPC_AUTH_LEVEL_INTEGRITY ) {
2004-12-06 18:44:17 +03:00
gensec_want_feature ( gensec_security , GENSEC_FEATURE_SIGN ) ;
2005-04-25 07:37:37 +04:00
} else if ( auth_level = = DCERPC_AUTH_LEVEL_PRIVACY ) {
2004-12-06 18:44:17 +03:00
gensec_want_feature ( gensec_security , GENSEC_FEATURE_SIGN ) ;
gensec_want_feature ( gensec_security , GENSEC_FEATURE_SEAL ) ;
2005-04-25 07:37:37 +04:00
} else if ( auth_level = = DCERPC_AUTH_LEVEL_CONNECT ) {
/* Default features */
} else {
DEBUG ( 2 , ( " auth_level %d not supported in DCE/RPC authentication \n " ,
auth_level ) ) ;
return NT_STATUS_INVALID_PARAMETER ;
2004-08-25 06:25:20 +04:00
}
2004-08-25 11:13:01 +04:00
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
return gensec_start_mech ( gensec_security ) ;
}
2004-08-10 08:28:00 +04:00
const char * gensec_get_name_by_authtype ( uint8_t authtype )
{
const struct gensec_security_ops * ops ;
2005-12-05 06:20:40 +03:00
ops = gensec_security_by_authtype ( NULL , authtype ) ;
2004-08-10 08:28:00 +04:00
if ( ops ) {
return ops - > name ;
}
return NULL ;
}
2004-09-13 12:45:41 +04:00
const char * gensec_get_name_by_oid ( const char * oid_string )
2004-09-13 08:28:10 +04:00
{
const struct gensec_security_ops * ops ;
2005-12-05 06:20:40 +03:00
ops = gensec_security_by_oid ( NULL , oid_string ) ;
2004-09-13 08:28:10 +04:00
if ( ops ) {
return ops - > name ;
}
2005-10-20 07:47:55 +04:00
return oid_string ;
2004-09-13 08:28:10 +04:00
}
2005-05-16 03:42:11 +04:00
/**
* Start a GENSEC sub - mechanism with a specifed mechansim structure , used in SPNEGO
*
*/
NTSTATUS gensec_start_mech_by_ops ( struct gensec_security * gensec_security ,
const struct gensec_security_ops * ops )
{
gensec_security - > ops = ops ;
return gensec_start_mech ( gensec_security ) ;
}
2004-07-06 06:59:05 +04:00
/**
* Start a GENSEC sub - mechanism by OID , used in SPNEGO
*
* @ note This should also be used when you wish to just start NLTMSSP ( for example ) , as it uses a
* well - known # define to hook it in .
*/
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
NTSTATUS gensec_start_mech_by_oid ( struct gensec_security * gensec_security ,
const char * mech_oid )
{
2005-12-05 06:20:40 +03:00
gensec_security - > ops = gensec_security_by_oid ( gensec_security , mech_oid ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
if ( ! gensec_security - > ops ) {
2004-07-06 06:59:05 +04:00
DEBUG ( 3 , ( " Could not find GENSEC backend for oid=%s \n " , mech_oid ) ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
return NT_STATUS_INVALID_PARAMETER ;
}
return gensec_start_mech ( gensec_security ) ;
}
2004-07-06 06:59:05 +04:00
/**
* Start a GENSEC sub - mechanism by a well know SASL name
*
*/
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
NTSTATUS gensec_start_mech_by_sasl_name ( struct gensec_security * gensec_security ,
const char * sasl_name )
{
2005-12-05 06:20:40 +03:00
gensec_security - > ops = gensec_security_by_sasl_name ( gensec_security , sasl_name ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
if ( ! gensec_security - > ops ) {
2004-07-06 06:59:05 +04:00
DEBUG ( 3 , ( " Could not find GENSEC backend for sasl_name=%s \n " , sasl_name ) ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
return NT_STATUS_INVALID_PARAMETER ;
}
return gensec_start_mech ( gensec_security ) ;
2005-10-20 07:47:55 +04:00
}
2006-02-04 12:53:50 +03:00
/**
* Start a GENSEC sub - mechanism with the preferred option from a SASL name list
*
*/
2006-03-05 20:15:19 +03:00
_PUBLIC_ NTSTATUS gensec_start_mech_by_sasl_list ( struct gensec_security * gensec_security ,
2006-02-04 12:53:50 +03:00
const char * * sasl_names )
{
NTSTATUS nt_status ;
TALLOC_CTX * mem_ctx = talloc_new ( gensec_security ) ;
const struct gensec_security_ops * * ops ;
if ( ! mem_ctx ) {
return NT_STATUS_NO_MEMORY ;
}
ops = gensec_security_by_sasl_list ( gensec_security , mem_ctx , sasl_names ) ;
if ( ! ops | | ! * ops ) {
DEBUG ( 3 , ( " Could not find GENSEC backend for any of sasl_name = %s \n " ,
str_list_join ( mem_ctx ,
sasl_names , ' ' ) ) ) ;
talloc_free ( mem_ctx ) ;
return NT_STATUS_INVALID_PARAMETER ;
}
nt_status = gensec_start_mech_by_ops ( gensec_security , ops [ 0 ] ) ;
talloc_free ( mem_ctx ) ;
return nt_status ;
}
2005-10-20 07:47:55 +04:00
/**
* Start a GENSEC sub - mechanism by an internal name
*
*/
NTSTATUS gensec_start_mech_by_name ( struct gensec_security * gensec_security ,
const char * name )
{
2005-12-05 06:20:40 +03:00
gensec_security - > ops = gensec_security_by_name ( gensec_security , name ) ;
2005-10-20 07:47:55 +04:00
if ( ! gensec_security - > ops ) {
DEBUG ( 3 , ( " Could not find GENSEC backend for name=%s \n " , name ) ) ;
return NT_STATUS_INVALID_PARAMETER ;
}
return gensec_start_mech ( gensec_security ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
}
/*
wrappers for the gensec function pointers
*/
NTSTATUS gensec_unseal_packet ( struct gensec_security * gensec_security ,
TALLOC_CTX * mem_ctx ,
2004-09-11 19:11:36 +04:00
uint8_t * data , size_t length ,
const uint8_t * whole_pdu , size_t pdu_length ,
2005-05-04 10:24:53 +04:00
const DATA_BLOB * sig )
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
{
2004-07-11 14:29:54 +04:00
if ( ! gensec_security - > ops - > unseal_packet ) {
return NT_STATUS_NOT_IMPLEMENTED ;
}
2004-12-06 18:44:17 +03:00
if ( ! gensec_have_feature ( gensec_security , GENSEC_FEATURE_SEAL ) ) {
2004-10-07 18:44:18 +04:00
return NT_STATUS_INVALID_PARAMETER ;
}
2005-08-20 10:14:14 +04:00
2004-09-11 19:11:36 +04:00
return gensec_security - > ops - > unseal_packet ( gensec_security , mem_ctx ,
data , length ,
whole_pdu , pdu_length ,
sig ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
}
NTSTATUS gensec_check_packet ( struct gensec_security * gensec_security ,
TALLOC_CTX * mem_ctx ,
const uint8_t * data , size_t length ,
2004-09-11 19:11:36 +04:00
const uint8_t * whole_pdu , size_t pdu_length ,
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
const DATA_BLOB * sig )
{
2004-07-11 14:29:54 +04:00
if ( ! gensec_security - > ops - > check_packet ) {
return NT_STATUS_NOT_IMPLEMENTED ;
}
2004-12-06 18:44:17 +03:00
if ( ! gensec_have_feature ( gensec_security , GENSEC_FEATURE_SIGN ) ) {
2004-08-25 06:25:20 +04:00
return NT_STATUS_INVALID_PARAMETER ;
}
2004-09-11 19:11:36 +04:00
return gensec_security - > ops - > check_packet ( gensec_security , mem_ctx , data , length , whole_pdu , pdu_length , sig ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
}
NTSTATUS gensec_seal_packet ( struct gensec_security * gensec_security ,
TALLOC_CTX * mem_ctx ,
uint8_t * data , size_t length ,
2004-09-11 19:11:36 +04:00
const uint8_t * whole_pdu , size_t pdu_length ,
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
DATA_BLOB * sig )
{
2004-07-11 14:29:54 +04:00
if ( ! gensec_security - > ops - > seal_packet ) {
return NT_STATUS_NOT_IMPLEMENTED ;
}
2004-12-06 18:44:17 +03:00
if ( ! gensec_have_feature ( gensec_security , GENSEC_FEATURE_SEAL ) ) {
2004-08-25 06:25:20 +04:00
return NT_STATUS_INVALID_PARAMETER ;
}
2005-08-20 10:14:14 +04:00
2004-09-11 19:11:36 +04:00
return gensec_security - > ops - > seal_packet ( gensec_security , mem_ctx , data , length , whole_pdu , pdu_length , sig ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
}
NTSTATUS gensec_sign_packet ( struct gensec_security * gensec_security ,
TALLOC_CTX * mem_ctx ,
const uint8_t * data , size_t length ,
2004-09-11 19:11:36 +04:00
const uint8_t * whole_pdu , size_t pdu_length ,
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
DATA_BLOB * sig )
{
2004-07-11 14:29:54 +04:00
if ( ! gensec_security - > ops - > sign_packet ) {
return NT_STATUS_NOT_IMPLEMENTED ;
}
2004-12-06 18:44:17 +03:00
if ( ! gensec_have_feature ( gensec_security , GENSEC_FEATURE_SIGN ) ) {
2004-08-25 06:25:20 +04:00
return NT_STATUS_INVALID_PARAMETER ;
}
2004-09-11 19:11:36 +04:00
return gensec_security - > ops - > sign_packet ( gensec_security , mem_ctx , data , length , whole_pdu , pdu_length , sig ) ;
}
2005-09-11 15:19:02 +04:00
size_t gensec_sig_size ( struct gensec_security * gensec_security , size_t data_size )
2004-09-11 19:11:36 +04:00
{
if ( ! gensec_security - > ops - > sig_size ) {
return 0 ;
}
2004-12-06 18:44:17 +03:00
if ( ! gensec_have_feature ( gensec_security , GENSEC_FEATURE_SIGN ) ) {
2004-09-11 19:11:36 +04:00
return 0 ;
}
2005-09-11 15:19:02 +04:00
return gensec_security - > ops - > sig_size ( gensec_security , data_size ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
}
2006-03-05 20:15:19 +03:00
_PUBLIC_ NTSTATUS gensec_wrap ( struct gensec_security * gensec_security ,
2005-01-01 01:45:11 +03:00
TALLOC_CTX * mem_ctx ,
const DATA_BLOB * in ,
DATA_BLOB * out )
{
if ( ! gensec_security - > ops - > wrap ) {
return NT_STATUS_NOT_IMPLEMENTED ;
}
return gensec_security - > ops - > wrap ( gensec_security , mem_ctx , in , out ) ;
}
2006-03-05 20:15:19 +03:00
_PUBLIC_ NTSTATUS gensec_unwrap ( struct gensec_security * gensec_security ,
2005-01-01 01:45:11 +03:00
TALLOC_CTX * mem_ctx ,
const DATA_BLOB * in ,
DATA_BLOB * out )
{
if ( ! gensec_security - > ops - > unwrap ) {
return NT_STATUS_NOT_IMPLEMENTED ;
}
return gensec_security - > ops - > unwrap ( gensec_security , mem_ctx , in , out ) ;
}
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
NTSTATUS gensec_session_key ( struct gensec_security * gensec_security ,
DATA_BLOB * session_key )
{
2004-07-11 14:29:54 +04:00
if ( ! gensec_security - > ops - > session_key ) {
return NT_STATUS_NOT_IMPLEMENTED ;
}
2005-08-20 10:14:14 +04:00
if ( ! gensec_have_feature ( gensec_security , GENSEC_FEATURE_SESSION_KEY ) ) {
return NT_STATUS_NO_USER_SESSION_KEY ;
}
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
return gensec_security - > ops - > session_key ( gensec_security , session_key ) ;
}
2004-07-11 14:29:54 +04:00
/**
* Return the credentials of a logged on user , including session keys
* etc .
*
* Only valid after a successful authentication
*
* May only be called once per authentication .
*
*/
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
NTSTATUS gensec_session_info ( struct gensec_security * gensec_security ,
struct auth_session_info * * session_info )
{
2004-08-12 01:06:11 +04:00
if ( ! gensec_security - > ops - > session_info ) {
return NT_STATUS_NOT_IMPLEMENTED ;
}
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
return gensec_security - > ops - > session_info ( gensec_security , session_info ) ;
}
/**
* Next state function for the GENSEC state machine
*
* @ param gensec_security GENSEC State
* @ param out_mem_ctx The TALLOC_CTX for * out to be allocated on
* @ param in The request , as a DATA_BLOB
* @ param out The reply , as an talloc ( ) ed DATA_BLOB , on * out_mem_ctx
* @ return Error , MORE_PROCESSING_REQUIRED if a reply is sent ,
* or NT_STATUS_OK if the user is authenticated .
*/
2006-03-05 20:15:19 +03:00
_PUBLIC_ NTSTATUS gensec_update ( struct gensec_security * gensec_security , TALLOC_CTX * out_mem_ctx ,
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
const DATA_BLOB in , DATA_BLOB * out )
{
return gensec_security - > ops - > update ( gensec_security , out_mem_ctx , in , out ) ;
}
2004-08-25 06:25:20 +04:00
/**
* Set the requirement for a certain feature on the connection
*
*/
2006-03-05 20:15:19 +03:00
_PUBLIC_ void gensec_want_feature ( struct gensec_security * gensec_security ,
2005-01-31 19:02:58 +03:00
uint32_t feature )
2004-08-25 06:25:20 +04:00
{
gensec_security - > want_features | = feature ;
}
2004-10-08 15:29:43 +04:00
/**
* Check the requirement for a certain feature on the connection
*
*/
2006-03-05 20:15:19 +03:00
_PUBLIC_ BOOL gensec_have_feature ( struct gensec_security * gensec_security ,
2005-01-31 19:02:58 +03:00
uint32_t feature )
2004-10-08 15:29:43 +04:00
{
2005-01-01 01:45:11 +03:00
if ( ! gensec_security - > ops - > have_feature ) {
return False ;
2004-10-08 15:29:43 +04:00
}
2005-08-20 10:14:14 +04:00
/* Can only 'have' a feature if you already 'want'ed it */
if ( gensec_security - > want_features & feature ) {
return gensec_security - > ops - > have_feature ( gensec_security , feature ) ;
}
return False ;
2004-10-08 15:29:43 +04:00
}
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
/**
2006-01-03 01:00:40 +03:00
* Associate a credentials structure with a GENSEC context - talloc_reference ( ) s it to the context
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
*
*/
2006-03-05 20:15:19 +03:00
_PUBLIC_ NTSTATUS gensec_set_credentials ( struct gensec_security * gensec_security , struct cli_credentials * credentials )
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
{
r6028: A MAJOR update to intergrate the new credentails system fully with
GENSEC, and to pull SCHANNEL into GENSEC, by making it less 'special'.
GENSEC now no longer has it's own handling of 'set username' etc,
instead it uses cli_credentials calls.
In order to link the credentails code right though Samba, a lot of
interfaces have changed to remove 'username, domain, password'
arguments, and these have been replaced with a single 'struct
cli_credentials'.
In the session setup code, a new parameter 'workgroup' contains the
client/server current workgroup, which seems unrelated to the
authentication exchange (it was being filled in from the auth info).
This allows in particular kerberos to only call back for passwords
when it actually needs to perform the kinit.
The kerberos code has been modified not to use the SPNEGO provided
'principal name' (in the mechListMIC), but to instead use the name the
host was connected to as. This better matches Microsoft behaviour,
is more secure and allows better use of standard kerberos functions.
To achieve this, I made changes to our socket code so that the
hostname (before name resolution) is now recorded on the socket.
In schannel, most of the code from librpc/rpc/dcerpc_schannel.c is now
in libcli/auth/schannel.c, and it looks much more like a standard
GENSEC module. The actual sign/seal code moved to
libcli/auth/schannel_sign.c in a previous commit.
The schannel credentails structure is now merged with the rest of the
credentails, as many of the values (username, workstation, domain)
where already present there. This makes handling this in a generic
manner much easier, as there is no longer a custom entry-point.
The auth_domain module continues to be developed, but is now just as
functional as auth_winbind. The changes here are consequential to the
schannel changes.
The only removed function at this point is the RPC-LOGIN test
(simulating the load of a WinXP login), which needs much more work to
clean it up (it contains copies of too much code from all over the
torture suite, and I havn't been able to penetrate its 'structure').
Andrew Bartlett
(This used to be commit 2301a4b38a21aa60917973451687063d83d18d66)
2005-03-24 07:14:06 +03:00
gensec_security - > credentials = talloc_reference ( gensec_security , credentials ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
return NT_STATUS_OK ;
}
/**
2006-01-03 01:00:40 +03:00
* Return the credentials structure associated with a GENSEC context
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
*
*/
r6028: A MAJOR update to intergrate the new credentails system fully with
GENSEC, and to pull SCHANNEL into GENSEC, by making it less 'special'.
GENSEC now no longer has it's own handling of 'set username' etc,
instead it uses cli_credentials calls.
In order to link the credentails code right though Samba, a lot of
interfaces have changed to remove 'username, domain, password'
arguments, and these have been replaced with a single 'struct
cli_credentials'.
In the session setup code, a new parameter 'workgroup' contains the
client/server current workgroup, which seems unrelated to the
authentication exchange (it was being filled in from the auth info).
This allows in particular kerberos to only call back for passwords
when it actually needs to perform the kinit.
The kerberos code has been modified not to use the SPNEGO provided
'principal name' (in the mechListMIC), but to instead use the name the
host was connected to as. This better matches Microsoft behaviour,
is more secure and allows better use of standard kerberos functions.
To achieve this, I made changes to our socket code so that the
hostname (before name resolution) is now recorded on the socket.
In schannel, most of the code from librpc/rpc/dcerpc_schannel.c is now
in libcli/auth/schannel.c, and it looks much more like a standard
GENSEC module. The actual sign/seal code moved to
libcli/auth/schannel_sign.c in a previous commit.
The schannel credentails structure is now merged with the rest of the
credentails, as many of the values (username, workstation, domain)
where already present there. This makes handling this in a generic
manner much easier, as there is no longer a custom entry-point.
The auth_domain module continues to be developed, but is now just as
functional as auth_winbind. The changes here are consequential to the
schannel changes.
The only removed function at this point is the RPC-LOGIN test
(simulating the load of a WinXP login), which needs much more work to
clean it up (it contains copies of too much code from all over the
torture suite, and I havn't been able to penetrate its 'structure').
Andrew Bartlett
(This used to be commit 2301a4b38a21aa60917973451687063d83d18d66)
2005-03-24 07:14:06 +03:00
struct cli_credentials * gensec_get_credentials ( struct gensec_security * gensec_security )
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
{
2005-12-11 11:31:46 +03:00
if ( ! gensec_security ) {
return NULL ;
}
r6028: A MAJOR update to intergrate the new credentails system fully with
GENSEC, and to pull SCHANNEL into GENSEC, by making it less 'special'.
GENSEC now no longer has it's own handling of 'set username' etc,
instead it uses cli_credentials calls.
In order to link the credentails code right though Samba, a lot of
interfaces have changed to remove 'username, domain, password'
arguments, and these have been replaced with a single 'struct
cli_credentials'.
In the session setup code, a new parameter 'workgroup' contains the
client/server current workgroup, which seems unrelated to the
authentication exchange (it was being filled in from the auth info).
This allows in particular kerberos to only call back for passwords
when it actually needs to perform the kinit.
The kerberos code has been modified not to use the SPNEGO provided
'principal name' (in the mechListMIC), but to instead use the name the
host was connected to as. This better matches Microsoft behaviour,
is more secure and allows better use of standard kerberos functions.
To achieve this, I made changes to our socket code so that the
hostname (before name resolution) is now recorded on the socket.
In schannel, most of the code from librpc/rpc/dcerpc_schannel.c is now
in libcli/auth/schannel.c, and it looks much more like a standard
GENSEC module. The actual sign/seal code moved to
libcli/auth/schannel_sign.c in a previous commit.
The schannel credentails structure is now merged with the rest of the
credentails, as many of the values (username, workstation, domain)
where already present there. This makes handling this in a generic
manner much easier, as there is no longer a custom entry-point.
The auth_domain module continues to be developed, but is now just as
functional as auth_winbind. The changes here are consequential to the
schannel changes.
The only removed function at this point is the RPC-LOGIN test
(simulating the load of a WinXP login), which needs much more work to
clean it up (it contains copies of too much code from all over the
torture suite, and I havn't been able to penetrate its 'structure').
Andrew Bartlett
(This used to be commit 2301a4b38a21aa60917973451687063d83d18d66)
2005-03-24 07:14:06 +03:00
return gensec_security - > credentials ;
2004-07-11 14:29:54 +04:00
}
2004-07-13 09:14:59 +04:00
/**
* Set the target service ( such as ' http ' or ' host ' ) on a GENSEC context - ensures it is talloc ( ) ed
*
*/
2006-03-05 20:15:19 +03:00
_PUBLIC_ NTSTATUS gensec_set_target_service ( struct gensec_security * gensec_security , const char * service )
2004-07-13 09:14:59 +04:00
{
2004-09-25 16:08:57 +04:00
gensec_security - > target . service = talloc_strdup ( gensec_security , service ) ;
2004-07-13 09:14:59 +04:00
if ( ! gensec_security - > target . service ) {
return NT_STATUS_NO_MEMORY ;
}
return NT_STATUS_OK ;
}
2006-03-05 20:15:19 +03:00
_PUBLIC_ const char * gensec_get_target_service ( struct gensec_security * gensec_security )
2005-09-17 13:46:20 +04:00
{
if ( gensec_security - > target . service ) {
return gensec_security - > target . service ;
}
return " host " ;
}
2004-07-13 09:14:59 +04:00
/**
* Set the target hostname ( suitable for kerberos resolutation ) on a GENSEC context - ensures it is talloc ( ) ed
*
*/
2006-03-05 20:15:19 +03:00
_PUBLIC_ NTSTATUS gensec_set_target_hostname ( struct gensec_security * gensec_security , const char * hostname )
2004-07-13 09:14:59 +04:00
{
2004-09-25 16:08:57 +04:00
gensec_security - > target . hostname = talloc_strdup ( gensec_security , hostname ) ;
2004-07-13 09:14:59 +04:00
if ( ! gensec_security - > target . hostname ) {
return NT_STATUS_NO_MEMORY ;
}
return NT_STATUS_OK ;
}
2006-03-05 20:15:19 +03:00
_PUBLIC_ const char * gensec_get_target_hostname ( struct gensec_security * gensec_security )
2004-07-13 09:14:59 +04:00
{
if ( gensec_security - > target . hostname ) {
return gensec_security - > target . hostname ;
}
2006-01-03 01:00:40 +03:00
/* We could add use the 'set sockaddr' call, and do a reverse
* lookup , but this would be both insecure ( compromising the
* way kerberos works ) and add DNS timeouts */
2004-07-13 09:14:59 +04:00
return NULL ;
}
2006-01-03 01:00:40 +03:00
/**
2006-01-10 01:12:53 +03:00
* Set ( and talloc_reference ) local and peer socket addresses onto a socket context on the GENSEC context
2006-01-03 01:00:40 +03:00
*
* This is so that kerberos can include these addresses in
* cryptographic tokens , to avoid certain attacks .
*/
2006-01-10 01:12:53 +03:00
NTSTATUS gensec_set_my_addr ( struct gensec_security * gensec_security , struct socket_address * my_addr )
2006-01-03 01:00:40 +03:00
{
2006-01-10 01:12:53 +03:00
gensec_security - > my_addr = my_addr ;
if ( my_addr & & ! talloc_reference ( gensec_security , my_addr ) ) {
2006-01-03 01:00:40 +03:00
return NT_STATUS_NO_MEMORY ;
}
return NT_STATUS_OK ;
}
2006-01-10 01:12:53 +03:00
NTSTATUS gensec_set_peer_addr ( struct gensec_security * gensec_security , struct socket_address * peer_addr )
2006-01-03 01:00:40 +03:00
{
2006-01-10 01:12:53 +03:00
gensec_security - > peer_addr = peer_addr ;
if ( peer_addr & & ! talloc_reference ( gensec_security , peer_addr ) ) {
2006-01-03 01:00:40 +03:00
return NT_STATUS_NO_MEMORY ;
}
return NT_STATUS_OK ;
}
2006-01-10 01:12:53 +03:00
struct socket_address * gensec_get_my_addr ( struct gensec_security * gensec_security )
2006-01-03 01:00:40 +03:00
{
2006-01-10 01:12:53 +03:00
if ( gensec_security - > my_addr ) {
return gensec_security - > my_addr ;
2006-01-03 01:00:40 +03:00
}
/* We could add a 'set sockaddr' call, and do a lookup. This
* would avoid needing to do system calls if nothing asks . */
return NULL ;
}
2006-01-10 01:12:53 +03:00
struct socket_address * gensec_get_peer_addr ( struct gensec_security * gensec_security )
2006-01-03 01:00:40 +03:00
{
2006-01-10 01:12:53 +03:00
if ( gensec_security - > peer_addr ) {
return gensec_security - > peer_addr ;
2006-01-03 01:00:40 +03:00
}
/* We could add a 'set sockaddr' call, and do a lookup. This
* would avoid needing to do system calls if nothing asks .
* However , this is not appropriate for the peer addres on
* datagram sockets */
return NULL ;
}
2005-09-17 13:46:20 +04:00
/**
* Set the target principal ( assuming it it known , say from the SPNEGO reply )
* - ensures it is talloc ( ) ed
*
*/
NTSTATUS gensec_set_target_principal ( struct gensec_security * gensec_security , const char * principal )
2004-07-13 09:14:59 +04:00
{
2005-09-17 13:46:20 +04:00
gensec_security - > target . principal = talloc_strdup ( gensec_security , principal ) ;
if ( ! gensec_security - > target . principal ) {
return NT_STATUS_NO_MEMORY ;
}
return NT_STATUS_OK ;
}
const char * gensec_get_target_principal ( struct gensec_security * gensec_security )
{
if ( gensec_security - > target . principal ) {
return gensec_security - > target . principal ;
2004-07-13 09:14:59 +04:00
}
2005-09-17 13:46:20 +04:00
return NULL ;
2004-07-13 09:14:59 +04:00
}
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
/*
register a GENSEC backend .
The ' name ' can be later used by other backends to find the operations
structure for this backend .
*/
2006-01-28 15:15:24 +03:00
NTSTATUS gensec_register ( const struct gensec_security_ops * ops )
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
{
2005-01-03 12:00:37 +03:00
if ( ! lp_parm_bool ( - 1 , " gensec " , ops - > name , ops - > enabled ) ) {
2004-09-17 10:49:24 +04:00
DEBUG ( 2 , ( " gensec subsystem %s is disabled \n " , ops - > name ) ) ;
return NT_STATUS_OK ;
}
2005-12-05 06:20:40 +03:00
if ( gensec_security_by_name ( NULL , ops - > name ) ! = NULL ) {
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
/* its already registered! */
DEBUG ( 0 , ( " GENSEC backend '%s' already registered \n " ,
ops - > name ) ) ;
return NT_STATUS_OBJECT_NAME_COLLISION ;
}
2006-01-28 15:15:24 +03:00
generic_security_ops = talloc_realloc ( talloc_autofree_context ( ) ,
generic_security_ops ,
struct gensec_security_ops * ,
gensec_num_backends + 2 ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
if ( ! generic_security_ops ) {
2006-01-28 15:15:24 +03:00
smb_panic ( " out of memory (or failed to realloc referenced memory) in gensec_register " ) ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
}
2006-02-22 12:49:07 +03:00
generic_security_ops [ gensec_num_backends ] = discard_const ( ops ) ;
2004-08-11 20:13:25 +04:00
gensec_num_backends + + ;
2005-12-01 07:58:15 +03:00
generic_security_ops [ gensec_num_backends ] = NULL ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
DEBUG ( 3 , ( " GENSEC backend '%s' registered \n " ,
ops - > name ) ) ;
return NT_STATUS_OK ;
}
/*
return the GENSEC interface version , and the size of some critical types
This can be used by backends to either detect compilation errors , or provide
multiple implementations for different smbd compilation options in one module
*/
const struct gensec_critical_sizes * gensec_interface_version ( void )
{
static const struct gensec_critical_sizes critical_sizes = {
GENSEC_INTERFACE_VERSION ,
sizeof ( struct gensec_security_ops ) ,
sizeof ( struct gensec_security ) ,
} ;
return & critical_sizes ;
}
/*
initialise the GENSEC subsystem
*/
2004-11-07 02:23:15 +03:00
NTSTATUS gensec_init ( void )
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
{
2005-12-31 01:46:16 +03:00
static BOOL initialized = False ;
2006-03-07 20:53:28 +03:00
init_module_fn static_init [ ] = STATIC_gensec_MODULES ;
2005-12-26 19:46:55 +03:00
init_module_fn * shared_init = load_samba_modules ( NULL , " gensec " ) ;
2005-12-31 01:46:16 +03:00
if ( initialized ) return NT_STATUS_OK ;
2005-12-31 04:59:08 +03:00
initialized = True ;
2005-12-31 01:46:16 +03:00
2005-12-26 19:46:55 +03:00
run_init_functions ( static_init ) ;
run_init_functions ( shared_init ) ;
talloc_free ( shared_init ) ;
2004-11-07 02:23:15 +03:00
return NT_STATUS_OK ;
r1294: A nice, large, commit...
This implements gensec for Samba's server side, and brings gensec up
to the standards of a full subsystem.
This means that use of the subsystem is by gensec_* functions, not
function pointers in structures (this is internal). This causes
changes in all the existing gensec users.
Our RPC server no longer contains it's own generalised security
scheme, and now calls gensec directly.
Gensec has also taken over the role of auth/auth_ntlmssp.c
An important part of gensec, is the output of the 'session_info'
struct. This is now reference counted, so that we can correctly free
it when a pipe is closed, no matter if it was inherited, or created by
per-pipe authentication.
The schannel code is reworked, to be in the same file for client and
server.
ntlm_auth is reworked to use gensec.
The major problem with this code is the way it relies on subsystem
auto-initialisation. The primary reason for this commit now.is to
allow these problems to be looked at, and fixed.
There are problems with the new code:
- I've tested it with smbtorture, but currently don't have VMware and
valgrind working (this I'll fix soon).
- The SPNEGO code is client-only at this point.
- We still do not do kerberos.
Andrew Bartlett
(This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)
2004-06-29 13:40:10 +04:00
}