1
0
mirror of https://github.com/samba-team/samba.git synced 2025-08-03 04:22:09 +03:00

r26385: Integrate gensec-socket into gensec.

(This used to be commit 78bb444b4b)
This commit is contained in:
Jelmer Vernooij
2007-12-10 18:42:07 +01:00
committed by Stefan Metzmacher
parent 3971827b6e
commit 3da665e9ac
9 changed files with 43 additions and 72 deletions

View File

@ -720,6 +720,7 @@ void cli_credentials_set_anonymous(struct cli_credentials *cred)
cli_credentials_set_domain(cred, "", CRED_SPECIFIED); cli_credentials_set_domain(cred, "", CRED_SPECIFIED);
cli_credentials_set_password(cred, NULL, CRED_SPECIFIED); cli_credentials_set_password(cred, NULL, CRED_SPECIFIED);
cli_credentials_set_realm(cred, NULL, CRED_SPECIFIED); cli_credentials_set_realm(cred, NULL, CRED_SPECIFIED);
cli_credentials_set_workstation(cred, "", CRED_UNINITIALISED);
} }
/** /**

View File

@ -6,9 +6,9 @@ SO_VERSION = 0
DESCRIPTION = Generic Security Library DESCRIPTION = Generic Security Library
PUBLIC_HEADERS = gensec.h spnego.h PUBLIC_HEADERS = gensec.h spnego.h
PUBLIC_PROTO_HEADER = gensec_proto.h PUBLIC_PROTO_HEADER = gensec_proto.h
OBJ_FILES = gensec.o OBJ_FILES = gensec.o socket.o
PUBLIC_DEPENDENCIES = \ PUBLIC_DEPENDENCIES = \
CREDENTIALS LIBSAMBA-UTIL LIBCRYPTO ASN1_UTIL CREDENTIALS LIBSAMBA-UTIL LIBCRYPTO ASN1_UTIL samba-socket LIBPACKET
# End SUBSYSTEM gensec # End SUBSYSTEM gensec
################################# #################################
@ -48,7 +48,7 @@ PRIVATE_DEPENDENCIES = CREDENTIALS SASL
SUBSYSTEM = gensec SUBSYSTEM = gensec
INIT_FUNCTION = gensec_spnego_init INIT_FUNCTION = gensec_spnego_init
PRIVATE_PROTO_HEADER = spnego_proto.h PRIVATE_PROTO_HEADER = spnego_proto.h
PRIVATE_DEPENDENCIES = ASN1_UTIL GENSEC_SOCKET CREDENTIALS PRIVATE_DEPENDENCIES = ASN1_UTIL CREDENTIALS
OBJ_FILES = spnego.o spnego_parse.o OBJ_FILES = spnego.o spnego_parse.o
# End MODULE gensec_spnego # End MODULE gensec_spnego
################################################ ################################################
@ -61,7 +61,7 @@ PRIVATE_PROTO_HEADER = schannel_proto.h
INIT_FUNCTION = gensec_schannel_init INIT_FUNCTION = gensec_schannel_init
OBJ_FILES = schannel.o \ OBJ_FILES = schannel.o \
schannel_sign.o schannel_sign.o
PRIVATE_DEPENDENCIES = SCHANNELDB NDR_SCHANNEL CREDENTIALS PRIVATE_DEPENDENCIES = SCHANNELDB NDR_SCHANNEL CREDENTIALS LIBNDR
OUTPUT_TYPE = INTEGRATED OUTPUT_TYPE = INTEGRATED
# End MODULE gensec_schannel # End MODULE gensec_schannel
################################################ ################################################
@ -72,19 +72,8 @@ OUTPUT_TYPE = INTEGRATED
PRIVATE_PROTO_HEADER = schannel_state.h PRIVATE_PROTO_HEADER = schannel_state.h
OBJ_FILES = \ OBJ_FILES = \
schannel_state.o schannel_state.o
PRIVATE_DEPENDENCIES = LDB_WRAP PRIVATE_DEPENDENCIES = LDB_WRAP SAMDB
# #
# End SUBSYSTEM SCHANNELDB # End SUBSYSTEM SCHANNELDB
################################################ ################################################
################################################
# Start SUBSYSTEM GENSEC_SOCKET
[SUBSYSTEM::GENSEC_SOCKET]
OBJ_FILES = \
socket.o
PUBLIC_DEPENDENCIES = samba-socket LIBPACKET
#PUBLIC_DEPENDENCIES = gensec
#
# End SUBSYSTEM GENSEC_SOCKET
################################################

View File

@ -166,6 +166,37 @@ struct gensec_critical_sizes {
int sizeof_gensec_security; int sizeof_gensec_security;
}; };
/* Socket wrapper */
struct gensec_security;
struct socket_context;
NTSTATUS gensec_socket_init(struct gensec_security *gensec_security,
struct socket_context *current_socket,
struct event_context *ev,
void (*recv_handler)(void *, uint16_t),
void *recv_private,
struct socket_context **new_socket);
/* These functions are for use here only (public because SPNEGO must
* use them for recursion) */
NTSTATUS gensec_wrap_packets(struct gensec_security *gensec_security,
TALLOC_CTX *mem_ctx,
const DATA_BLOB *in,
DATA_BLOB *out,
size_t *len_processed);
/* These functions are for use here only (public because SPNEGO must
* use them for recursion) */
NTSTATUS gensec_unwrap_packets(struct gensec_security *gensec_security,
TALLOC_CTX *mem_ctx,
const DATA_BLOB *in,
DATA_BLOB *out,
size_t *len_processed);
/* These functions are for use here only (public because SPNEGO must
* use them for recursion) */
NTSTATUS gensec_packet_full_request(struct gensec_security *gensec_security,
DATA_BLOB blob, size_t *size);
struct loadparm_context; struct loadparm_context;
#include "auth/gensec/gensec_proto.h" #include "auth/gensec/gensec_proto.h"

View File

@ -1,50 +0,0 @@
/*
Unix SMB/CIFS implementation.
Generic Authentication Interface (socket wrapper)
Copyright (C) Andrew Bartlett <abartlet@samba.org> 2006
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
struct gensec_security;
struct socket_context;
NTSTATUS gensec_socket_init(struct gensec_security *gensec_security,
struct socket_context *current_socket,
struct event_context *ev,
void (*recv_handler)(void *, uint16_t),
void *recv_private,
struct socket_context **new_socket);
/* These functions are for use here only (public because SPNEGO must
* use them for recursion) */
NTSTATUS gensec_wrap_packets(struct gensec_security *gensec_security,
TALLOC_CTX *mem_ctx,
const DATA_BLOB *in,
DATA_BLOB *out,
size_t *len_processed);
/* These functions are for use here only (public because SPNEGO must
* use them for recursion) */
NTSTATUS gensec_unwrap_packets(struct gensec_security *gensec_security,
TALLOC_CTX *mem_ctx,
const DATA_BLOB *in,
DATA_BLOB *out,
size_t *len_processed);
/* These functions are for use here only (public because SPNEGO must
* use them for recursion) */
NTSTATUS gensec_packet_full_request(struct gensec_security *gensec_security,
DATA_BLOB blob, size_t *size);

View File

@ -26,7 +26,6 @@
#include "librpc/gen_ndr/ndr_dcerpc.h" #include "librpc/gen_ndr/ndr_dcerpc.h"
#include "auth/credentials/credentials.h" #include "auth/credentials/credentials.h"
#include "auth/gensec/gensec.h" #include "auth/gensec/gensec.h"
#include "auth/gensec/socket.h"
enum spnego_state_position { enum spnego_state_position {
SPNEGO_SERVER_START, SPNEGO_SERVER_START,

View File

@ -14,6 +14,7 @@ OBJ_FILES = \
PRIVATE_DEPENDENCIES = CREDENTIALS \ PRIVATE_DEPENDENCIES = CREDENTIALS \
LIBCLI_LDAP SAMDB \ LIBCLI_LDAP SAMDB \
process_model \ process_model \
GENSEC_SOCKET gensec \
LIBSAMBA-CONFIG
# End SUBSYSTEM SMB # End SUBSYSTEM SMB
####################### #######################

View File

@ -26,7 +26,6 @@
#include "lib/ldb/include/ldb_errors.h" #include "lib/ldb/include/ldb_errors.h"
#include "dsdb/samdb/samdb.h" #include "dsdb/samdb/samdb.h"
#include "auth/gensec/gensec.h" #include "auth/gensec/gensec.h"
#include "auth/gensec/socket.h"
#include "param/param.h" #include "param/param.h"
static NTSTATUS ldapsrv_BindSimple(struct ldapsrv_call *call) static NTSTATUS ldapsrv_BindSimple(struct ldapsrv_call *call)

View File

@ -26,7 +26,6 @@
#include "libcli/ldap/ldap_client.h" #include "libcli/ldap/ldap_client.h"
#include "lib/tls/tls.h" #include "lib/tls/tls.h"
#include "auth/gensec/gensec.h" #include "auth/gensec/gensec.h"
#include "auth/gensec/socket.h"
#include "auth/credentials/credentials.h" #include "auth/credentials/credentials.h"
#include "lib/stream/packet.h" #include "lib/stream/packet.h"
#include "param/param.h" #include "param/param.h"
@ -221,6 +220,8 @@ NTSTATUS ldap_bind_sasl(struct ldap_connection *conn,
NULL NULL
}; };
gensec_init(lp_ctx);
status = gensec_client_start(conn, &conn->gensec, NULL, lp_ctx); status = gensec_client_start(conn, &conn->gensec, NULL, lp_ctx);
if (!NT_STATUS_IS_OK(status)) { if (!NT_STATUS_IS_OK(status)) {
DEBUG(0, ("Failed to start GENSEC engine (%s)\n", nt_errstr(status))); DEBUG(0, ("Failed to start GENSEC engine (%s)\n", nt_errstr(status)));

View File

@ -137,7 +137,7 @@ NTSTATUS nbt_name_refresh(struct nbt_name_socket *nbtsock,
/* /**
a wins name refresh with multiple WINS servers and multiple a wins name refresh with multiple WINS servers and multiple
addresses to refresh. Try each WINS server in turn, until we get a addresses to refresh. Try each WINS server in turn, until we get a
reply for each address reply for each address
@ -152,7 +152,7 @@ struct refresh_wins_state {
}; };
/* /**
state handler for WINS multi-homed multi-server name refresh state handler for WINS multi-homed multi-server name refresh
*/ */
static void name_refresh_wins_handler(struct nbt_name_request *req) static void name_refresh_wins_handler(struct nbt_name_request *req)