7 Commits

Author	SHA1	Message	Date
Stefan Metzmacher	b76361de16	CVE-2016-2111: auth/gensec: correctly report GENSEC_FEATURE_{SIGN,SEAL} in schannel_have_feature() ... This depends on the DCERPC auth level. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11749 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>	2016-03-29 16:26:15 +02:00
Stefan Metzmacher	a6d1056bc2	CVE-2016-2111: auth/gensec: require DCERPC_AUTH_LEVEL_INTEGRITY or higher in schannel_update() ... It doesn't make any sense to allow other auth levels. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11749 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>	2016-03-29 16:26:15 +02:00
Stefan Metzmacher	153938a1f2	auth/gensec: add support for SEC_CHAN_DNS_DOMAIN to schannel_update() ... Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2014-12-19 13:15:13 +01:00
Stefan Metzmacher	fc59cc3102	auth/gensec: use auth_ctx->generate_session_info() for schannel ... This way we generate a correct session info for the s3 rpc_server, including a unix token. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>	2014-04-24 11:21:05 +02:00
Stefan Metzmacher	03006d0e44	auth/gensec: implement GENSEC_FEATURE_SIGN_PKT_HEADER in schannel.c ... Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2014-01-07 00:27:11 +01:00
Stefan Metzmacher	616cd00995	auth/gensec: move libcli/auth/schannel_sign.c into schannel.c ... Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2014-01-07 00:27:11 +01:00
Günther Deschner	4d2ec9e37e	gensec: move schannel module to toplevel. ... Guenther Signed-off-by: Günther Deschner <gd@samba.org> Pair-Programmed-With: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>	2013-09-19 11:08:44 +02:00