sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-08-03 04:22:09 +03:00
Code Activity

Merge from HEAD:

Browse Source 
>Added some extra code to test absence/presence of LM and NT passwords.
This commit is contained in:
Tim Potter
-
parent 5ea2edaadd
commit 89a2ee7e72
1 changed files with 17 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
source/python/py_winbind.c
View File

@ -412,13 +412,18 @@ static PyObject *py_auth_plaintext(PyObject *self, PyObject *args)
/* Challenge/response authentication */ /* Challenge/response authentication */
static PyObject *py_auth_crap(PyObject *self, PyObject *args) static PyObject *py_auth_crap(PyObject *self, PyObject *args, PyObject *kw)
{ {
static char *kwlist[] =
{"username", "password", "use_lm_hash", "use_nt_hash", NULL };
struct winbindd_request request; struct winbindd_request request;
struct winbindd_response response; struct winbindd_response response;
char *username, *password; char *username, *password;
int use_lm_hash = 1, use_nt_hash = 1;
if (!PyArg_ParseTuple(args, "ss", &username, &password)) if (!PyArg_ParseTupleAndKeywords(
args, kw, "ss|ii", kwlist, &username, &password,
&use_lm_hash, &use_nt_hash))
return NULL; return NULL;
ZERO_STRUCT(request); ZERO_STRUCT(request);
@ -428,13 +433,17 @@ static PyObject *py_auth_crap(PyObject *self, PyObject *args)
generate_random_buffer(request.data.auth_crap.chal, 8, False); generate_random_buffer(request.data.auth_crap.chal, 8, False);
SMBencrypt((uchar *)password, request.data.auth_crap.chal, if (use_lm_hash) {
(uchar *)request.data.auth_crap.lm_resp); SMBencrypt((uchar *)password, request.data.auth_crap.chal,
SMBNTencrypt((uchar *)password, request.data.auth_crap.chal, (uchar *)request.data.auth_crap.lm_resp);
(uchar *)request.data.auth_crap.nt_resp); request.data.auth_crap.lm_resp_len = 24;
}
request.data.auth_crap.lm_resp_len = 24; if (use_nt_hash) {
request.data.auth_crap.nt_resp_len = 24; SMBNTencrypt((uchar *)password, request.data.auth_crap.chal,
(uchar *)request.data.auth_crap.nt_resp);
request.data.auth_crap.nt_resp_len = 24;
}
if (winbindd_request(WINBINDD_PAM_AUTH_CRAP, &request, &response) if (winbindd_request(WINBINDD_PAM_AUTH_CRAP, &request, &response)
!= NSS_STATUS_SUCCESS) { != NSS_STATUS_SUCCESS) {