mirror of
https://github.com/samba-team/samba.git
synced 2025-08-03 04:22:09 +03:00
r26385: Integrate gensec-socket into gensec.
(This used to be commit 78bb444b4b
)
This commit is contained in:
committed by
Stefan Metzmacher
parent
3971827b6e
commit
3da665e9ac
@ -720,6 +720,7 @@ void cli_credentials_set_anonymous(struct cli_credentials *cred)
|
|||||||
cli_credentials_set_domain(cred, "", CRED_SPECIFIED);
|
cli_credentials_set_domain(cred, "", CRED_SPECIFIED);
|
||||||
cli_credentials_set_password(cred, NULL, CRED_SPECIFIED);
|
cli_credentials_set_password(cred, NULL, CRED_SPECIFIED);
|
||||||
cli_credentials_set_realm(cred, NULL, CRED_SPECIFIED);
|
cli_credentials_set_realm(cred, NULL, CRED_SPECIFIED);
|
||||||
|
cli_credentials_set_workstation(cred, "", CRED_UNINITIALISED);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
@ -6,9 +6,9 @@ SO_VERSION = 0
|
|||||||
DESCRIPTION = Generic Security Library
|
DESCRIPTION = Generic Security Library
|
||||||
PUBLIC_HEADERS = gensec.h spnego.h
|
PUBLIC_HEADERS = gensec.h spnego.h
|
||||||
PUBLIC_PROTO_HEADER = gensec_proto.h
|
PUBLIC_PROTO_HEADER = gensec_proto.h
|
||||||
OBJ_FILES = gensec.o
|
OBJ_FILES = gensec.o socket.o
|
||||||
PUBLIC_DEPENDENCIES = \
|
PUBLIC_DEPENDENCIES = \
|
||||||
CREDENTIALS LIBSAMBA-UTIL LIBCRYPTO ASN1_UTIL
|
CREDENTIALS LIBSAMBA-UTIL LIBCRYPTO ASN1_UTIL samba-socket LIBPACKET
|
||||||
# End SUBSYSTEM gensec
|
# End SUBSYSTEM gensec
|
||||||
#################################
|
#################################
|
||||||
|
|
||||||
@ -48,7 +48,7 @@ PRIVATE_DEPENDENCIES = CREDENTIALS SASL
|
|||||||
SUBSYSTEM = gensec
|
SUBSYSTEM = gensec
|
||||||
INIT_FUNCTION = gensec_spnego_init
|
INIT_FUNCTION = gensec_spnego_init
|
||||||
PRIVATE_PROTO_HEADER = spnego_proto.h
|
PRIVATE_PROTO_HEADER = spnego_proto.h
|
||||||
PRIVATE_DEPENDENCIES = ASN1_UTIL GENSEC_SOCKET CREDENTIALS
|
PRIVATE_DEPENDENCIES = ASN1_UTIL CREDENTIALS
|
||||||
OBJ_FILES = spnego.o spnego_parse.o
|
OBJ_FILES = spnego.o spnego_parse.o
|
||||||
# End MODULE gensec_spnego
|
# End MODULE gensec_spnego
|
||||||
################################################
|
################################################
|
||||||
@ -61,7 +61,7 @@ PRIVATE_PROTO_HEADER = schannel_proto.h
|
|||||||
INIT_FUNCTION = gensec_schannel_init
|
INIT_FUNCTION = gensec_schannel_init
|
||||||
OBJ_FILES = schannel.o \
|
OBJ_FILES = schannel.o \
|
||||||
schannel_sign.o
|
schannel_sign.o
|
||||||
PRIVATE_DEPENDENCIES = SCHANNELDB NDR_SCHANNEL CREDENTIALS
|
PRIVATE_DEPENDENCIES = SCHANNELDB NDR_SCHANNEL CREDENTIALS LIBNDR
|
||||||
OUTPUT_TYPE = INTEGRATED
|
OUTPUT_TYPE = INTEGRATED
|
||||||
# End MODULE gensec_schannel
|
# End MODULE gensec_schannel
|
||||||
################################################
|
################################################
|
||||||
@ -72,19 +72,8 @@ OUTPUT_TYPE = INTEGRATED
|
|||||||
PRIVATE_PROTO_HEADER = schannel_state.h
|
PRIVATE_PROTO_HEADER = schannel_state.h
|
||||||
OBJ_FILES = \
|
OBJ_FILES = \
|
||||||
schannel_state.o
|
schannel_state.o
|
||||||
PRIVATE_DEPENDENCIES = LDB_WRAP
|
PRIVATE_DEPENDENCIES = LDB_WRAP SAMDB
|
||||||
#
|
#
|
||||||
# End SUBSYSTEM SCHANNELDB
|
# End SUBSYSTEM SCHANNELDB
|
||||||
################################################
|
################################################
|
||||||
|
|
||||||
################################################
|
|
||||||
# Start SUBSYSTEM GENSEC_SOCKET
|
|
||||||
[SUBSYSTEM::GENSEC_SOCKET]
|
|
||||||
OBJ_FILES = \
|
|
||||||
socket.o
|
|
||||||
PUBLIC_DEPENDENCIES = samba-socket LIBPACKET
|
|
||||||
#PUBLIC_DEPENDENCIES = gensec
|
|
||||||
#
|
|
||||||
# End SUBSYSTEM GENSEC_SOCKET
|
|
||||||
################################################
|
|
||||||
|
|
||||||
|
@ -166,6 +166,37 @@ struct gensec_critical_sizes {
|
|||||||
int sizeof_gensec_security;
|
int sizeof_gensec_security;
|
||||||
};
|
};
|
||||||
|
|
||||||
|
/* Socket wrapper */
|
||||||
|
|
||||||
|
struct gensec_security;
|
||||||
|
struct socket_context;
|
||||||
|
|
||||||
|
NTSTATUS gensec_socket_init(struct gensec_security *gensec_security,
|
||||||
|
struct socket_context *current_socket,
|
||||||
|
struct event_context *ev,
|
||||||
|
void (*recv_handler)(void *, uint16_t),
|
||||||
|
void *recv_private,
|
||||||
|
struct socket_context **new_socket);
|
||||||
|
/* These functions are for use here only (public because SPNEGO must
|
||||||
|
* use them for recursion) */
|
||||||
|
NTSTATUS gensec_wrap_packets(struct gensec_security *gensec_security,
|
||||||
|
TALLOC_CTX *mem_ctx,
|
||||||
|
const DATA_BLOB *in,
|
||||||
|
DATA_BLOB *out,
|
||||||
|
size_t *len_processed);
|
||||||
|
/* These functions are for use here only (public because SPNEGO must
|
||||||
|
* use them for recursion) */
|
||||||
|
NTSTATUS gensec_unwrap_packets(struct gensec_security *gensec_security,
|
||||||
|
TALLOC_CTX *mem_ctx,
|
||||||
|
const DATA_BLOB *in,
|
||||||
|
DATA_BLOB *out,
|
||||||
|
size_t *len_processed);
|
||||||
|
|
||||||
|
/* These functions are for use here only (public because SPNEGO must
|
||||||
|
* use them for recursion) */
|
||||||
|
NTSTATUS gensec_packet_full_request(struct gensec_security *gensec_security,
|
||||||
|
DATA_BLOB blob, size_t *size);
|
||||||
|
|
||||||
struct loadparm_context;
|
struct loadparm_context;
|
||||||
|
|
||||||
#include "auth/gensec/gensec_proto.h"
|
#include "auth/gensec/gensec_proto.h"
|
||||||
|
@ -1,50 +0,0 @@
|
|||||||
/*
|
|
||||||
Unix SMB/CIFS implementation.
|
|
||||||
|
|
||||||
Generic Authentication Interface (socket wrapper)
|
|
||||||
|
|
||||||
Copyright (C) Andrew Bartlett <abartlet@samba.org> 2006
|
|
||||||
|
|
||||||
This program is free software; you can redistribute it and/or modify
|
|
||||||
it under the terms of the GNU General Public License as published by
|
|
||||||
the Free Software Foundation; either version 3 of the License, or
|
|
||||||
(at your option) any later version.
|
|
||||||
|
|
||||||
This program is distributed in the hope that it will be useful,
|
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
||||||
GNU General Public License for more details.
|
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License
|
|
||||||
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
||||||
*/
|
|
||||||
|
|
||||||
struct gensec_security;
|
|
||||||
struct socket_context;
|
|
||||||
|
|
||||||
NTSTATUS gensec_socket_init(struct gensec_security *gensec_security,
|
|
||||||
struct socket_context *current_socket,
|
|
||||||
struct event_context *ev,
|
|
||||||
void (*recv_handler)(void *, uint16_t),
|
|
||||||
void *recv_private,
|
|
||||||
struct socket_context **new_socket);
|
|
||||||
/* These functions are for use here only (public because SPNEGO must
|
|
||||||
* use them for recursion) */
|
|
||||||
NTSTATUS gensec_wrap_packets(struct gensec_security *gensec_security,
|
|
||||||
TALLOC_CTX *mem_ctx,
|
|
||||||
const DATA_BLOB *in,
|
|
||||||
DATA_BLOB *out,
|
|
||||||
size_t *len_processed);
|
|
||||||
/* These functions are for use here only (public because SPNEGO must
|
|
||||||
* use them for recursion) */
|
|
||||||
NTSTATUS gensec_unwrap_packets(struct gensec_security *gensec_security,
|
|
||||||
TALLOC_CTX *mem_ctx,
|
|
||||||
const DATA_BLOB *in,
|
|
||||||
DATA_BLOB *out,
|
|
||||||
size_t *len_processed);
|
|
||||||
|
|
||||||
/* These functions are for use here only (public because SPNEGO must
|
|
||||||
* use them for recursion) */
|
|
||||||
NTSTATUS gensec_packet_full_request(struct gensec_security *gensec_security,
|
|
||||||
DATA_BLOB blob, size_t *size);
|
|
||||||
|
|
@ -26,7 +26,6 @@
|
|||||||
#include "librpc/gen_ndr/ndr_dcerpc.h"
|
#include "librpc/gen_ndr/ndr_dcerpc.h"
|
||||||
#include "auth/credentials/credentials.h"
|
#include "auth/credentials/credentials.h"
|
||||||
#include "auth/gensec/gensec.h"
|
#include "auth/gensec/gensec.h"
|
||||||
#include "auth/gensec/socket.h"
|
|
||||||
|
|
||||||
enum spnego_state_position {
|
enum spnego_state_position {
|
||||||
SPNEGO_SERVER_START,
|
SPNEGO_SERVER_START,
|
||||||
|
@ -14,6 +14,7 @@ OBJ_FILES = \
|
|||||||
PRIVATE_DEPENDENCIES = CREDENTIALS \
|
PRIVATE_DEPENDENCIES = CREDENTIALS \
|
||||||
LIBCLI_LDAP SAMDB \
|
LIBCLI_LDAP SAMDB \
|
||||||
process_model \
|
process_model \
|
||||||
GENSEC_SOCKET
|
gensec \
|
||||||
|
LIBSAMBA-CONFIG
|
||||||
# End SUBSYSTEM SMB
|
# End SUBSYSTEM SMB
|
||||||
#######################
|
#######################
|
||||||
|
@ -26,7 +26,6 @@
|
|||||||
#include "lib/ldb/include/ldb_errors.h"
|
#include "lib/ldb/include/ldb_errors.h"
|
||||||
#include "dsdb/samdb/samdb.h"
|
#include "dsdb/samdb/samdb.h"
|
||||||
#include "auth/gensec/gensec.h"
|
#include "auth/gensec/gensec.h"
|
||||||
#include "auth/gensec/socket.h"
|
|
||||||
#include "param/param.h"
|
#include "param/param.h"
|
||||||
|
|
||||||
static NTSTATUS ldapsrv_BindSimple(struct ldapsrv_call *call)
|
static NTSTATUS ldapsrv_BindSimple(struct ldapsrv_call *call)
|
||||||
|
@ -26,7 +26,6 @@
|
|||||||
#include "libcli/ldap/ldap_client.h"
|
#include "libcli/ldap/ldap_client.h"
|
||||||
#include "lib/tls/tls.h"
|
#include "lib/tls/tls.h"
|
||||||
#include "auth/gensec/gensec.h"
|
#include "auth/gensec/gensec.h"
|
||||||
#include "auth/gensec/socket.h"
|
|
||||||
#include "auth/credentials/credentials.h"
|
#include "auth/credentials/credentials.h"
|
||||||
#include "lib/stream/packet.h"
|
#include "lib/stream/packet.h"
|
||||||
#include "param/param.h"
|
#include "param/param.h"
|
||||||
@ -221,6 +220,8 @@ NTSTATUS ldap_bind_sasl(struct ldap_connection *conn,
|
|||||||
NULL
|
NULL
|
||||||
};
|
};
|
||||||
|
|
||||||
|
gensec_init(lp_ctx);
|
||||||
|
|
||||||
status = gensec_client_start(conn, &conn->gensec, NULL, lp_ctx);
|
status = gensec_client_start(conn, &conn->gensec, NULL, lp_ctx);
|
||||||
if (!NT_STATUS_IS_OK(status)) {
|
if (!NT_STATUS_IS_OK(status)) {
|
||||||
DEBUG(0, ("Failed to start GENSEC engine (%s)\n", nt_errstr(status)));
|
DEBUG(0, ("Failed to start GENSEC engine (%s)\n", nt_errstr(status)));
|
||||||
|
@ -137,7 +137,7 @@ NTSTATUS nbt_name_refresh(struct nbt_name_socket *nbtsock,
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
/*
|
/**
|
||||||
a wins name refresh with multiple WINS servers and multiple
|
a wins name refresh with multiple WINS servers and multiple
|
||||||
addresses to refresh. Try each WINS server in turn, until we get a
|
addresses to refresh. Try each WINS server in turn, until we get a
|
||||||
reply for each address
|
reply for each address
|
||||||
@ -152,7 +152,7 @@ struct refresh_wins_state {
|
|||||||
};
|
};
|
||||||
|
|
||||||
|
|
||||||
/*
|
/**
|
||||||
state handler for WINS multi-homed multi-server name refresh
|
state handler for WINS multi-homed multi-server name refresh
|
||||||
*/
|
*/
|
||||||
static void name_refresh_wins_handler(struct nbt_name_request *req)
|
static void name_refresh_wins_handler(struct nbt_name_request *req)
|
||||||
|
Reference in New Issue
Block a user