sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-10-23 11:33:16 +03:00
Code Activity
53,676 Commits 64 Branches 1,177 Tags
02996093088a9244c44f46818ac093430d21a99c
Commit Graph

32 Commits

Author SHA1 Message Date
Volker Lendecke
c653e8daaf Fix two memleaks in the encryption code 
ntlmssp_seal_packet creates its own signature data blob, which we then
have to free.

Jeremy, please check and merge appropriately (Yes, I'm asking you to do the
janitor work, I want you to *look* at this :-))

Volker
 2009-03-24 22:00:10 +01:00
Volker Lendecke
ac4a77ccca Fix for crash bug freeing a non-malloc'ed buffer if the client sends a non-encrypted packet with the crypto state set. 2008-12-05 13:20:55 -08:00
Volker Lendecke
4b5169f590 Add explicit buf arg to cli_encrypt_message and cli_calculate_sign_mac 
(This used to be commit db6ae9ed23)
 2008-02-28 13:12:34 +01:00
Jeremy Allison
9254bb4ef1 Refactor the crypto code after a very helpful conversation 
with Volker. Mostly making sure we have data on the incoming
packet type, not stored in the smb header.
Jeremy.
(This used to be commit c4e5a50504)
 2008-01-04 12:56:23 -08:00
Jeremy Allison
afc93255d1 Add SMB encryption. Still fixing client decrypt but 
negotiation works.
Jeremy.
(This used to be commit d78045601a)
 2007-12-26 17:12:36 -08:00
Gerald (Jerry) Carter
e5a951325a [GLUE] Rsync SAMBA_3_2_0 SVN r25598 in order to create the v3-2-test branch. 
(This used to be commit 5c6c8e1fe9)
 2007-10-10 15:34:30 -05:00
Andrew Tridgell
5e54558c6d r23784: use the GPLv3 boilerplate as recommended by the FSF and the license text 
(This used to be commit b0132e94fc)
 2007-10-10 12:28:22 -05:00
Jeremy Allison
d824b98f80 r23779: Change from v2 or later to v3 or later. 
Jeremy.
(This used to be commit 407e6e695b)
 2007-10-10 12:28:20 -05:00
Volker Lendecke
7192160599 r22747: Fix some C++ warnings 
(This used to be commit a66a04e9f1)
 2007-10-10 12:21:54 -05:00
Jeremy Allison
0829e1ad1c r22391: Looks bigger than it is. Make "inbuf" available 
to all callers of smb_setlen (via set_message()
calls). This will allow the server to reflect back
the correct encryption context.
Jeremy.
(This used to be commit 2d80a96120)
 2007-10-10 12:19:30 -05:00
Jeremy Allison
dc90cd89a7 r22389: Start preparing for multiple encryption contexts in the 
server. Allow server to reflect back to calling client
the encryption context that was sent.
Jeremy.
(This used to be commit b49e90335d)
 2007-10-10 12:19:30 -05:00
Jeremy Allison
5cee3be014 r22358: Use gss error to NTSTATUS mapping function for errors. 
Jeremy.
(This used to be commit 11fa0ca9e2)
 2007-10-10 12:19:29 -05:00
Jeremy Allison
44ca85a506 r22016: Try and fix the build - move things out of proto.h 
Jeremy.
(This used to be commit 29933600cf)
 2007-10-10 12:19:02 -05:00
Jeremy Allison
b0bcb48369 r22013: Move to SSPI framing (sig first in NTLM). 
Jeremy
(This used to be commit 22eaed76f0)
 2007-10-10 12:19:01 -05:00
Jeremy Allison
e9157961d6 r21997: Implement the server side of gss seal negotiate. 
Jeremy.
(This used to be commit 6b923acfee)
 2007-10-10 12:18:58 -05:00
Jeremy Allison
3215c09a81 r21994: Ignore keepalives in the correct buffer (out not in :-). 
Jeremy.
(This used to be commit 9785528ddf)
 2007-10-10 12:18:58 -05:00
Jeremy Allison
4a66d0e232 r21991: I hate Steve French :-). Add support for encryption 
contexts....
Jeremy.
(This used to be commit ae8f3649f7)
 2007-10-10 12:18:58 -05:00
Jeremy Allison
8b63654c2e r21969: Start working on the gss-side of the server negotiation. 
Jeremy.
(This used to be commit fbc569b530)
 2007-10-10 12:18:54 -05:00
Jeremy Allison
f93d75c932 r21926: Fix missing enum specifier pointed out by Don McCall @ HP. 
Thanks Don !
Jeremy.
(This used to be commit 662344d1ec)
 2007-10-10 12:18:49 -05:00
Jeremy Allison
5a025d845a r21923: Add in the gss decrypt. 
Jeremy.
(This used to be commit 00f58951b4)
 2007-10-10 12:18:49 -05:00
Jeremy Allison
8c395be5e5 r21922: Fixed the build by rather horrid means. I really need 
to restructure libsmb/smb_signing.c so it isn't in
the base libs path but lives in libsmb instead (like
smb_seal.c does).
Jeremy.
(This used to be commit 1b828f051d)
 2007-10-10 12:18:49 -05:00
Jeremy Allison
42238c78bb r21917: Start to do the gss versions of sign+seal. 
Jeremy.
(This used to be commit a226645353)
 2007-10-10 12:18:48 -05:00
Jeremy Allison
56c777882f r21916: Fix couple of "return" calls on void functions. 
Ensure we ignore reqests to free keepalive buffers
as we only copied these.
Jeremy.
(This used to be commit a184bdbe3c)
 2007-10-10 12:18:48 -05:00
Jeremy Allison
d8bb69515b r21912: There's no point checksumming the packet length 
this already has to be right. This makes the
signed+sealed area the same as it will be with
gss calls. Now to go implement them.
Jeremy.
(This used to be commit 80810af7d1)
 2007-10-10 12:18:48 -05:00
Jeremy Allison
6aff12a9f6 r21903: Get the length calculations right (I always forget 
the 4 byte length isn't included in the length :-).
We now have working NTLMSSP transport encryption
with sign+seal. W00t!
Jeremy.
(This used to be commit d34584cb5c)
 2007-10-10 12:18:47 -05:00
Jeremy Allison
071db6fdbf r21897: Add in a basic raw NTLM encrypt request. Now 
for testing.
Jeremy.
(This used to be commit 783a7b3085)
 2007-10-10 12:18:46 -05:00
Jeremy Allison
6b0dcfa62d r21894: Some refactoring of server side encryption context. Support 
"raw" NTLM auth (no spnego).
Jeremy.
(This used to be commit 6b5ff7bd59)
 2007-10-10 12:18:46 -05:00
Jeremy Allison
efbdda540a r21883: Try and fix the build by removing the prototypes for 
functions that take a gss context handle in includes.h
Jeremy.
(This used to be commit 638b03242d)
 2007-10-10 12:18:43 -05:00
Jeremy Allison
296dcbac58 r21882: The server part of the code has to use an AUTH_NTLMSSP struct, 
not just an NTLMSSP - grr. This complicates the re-use of
common client and server code but I think I've got it right.
Not turned on of valgrinded yet, but you can see it start
to take shape !
Jeremy.
(This used to be commit 60fc9c0aed)
 2007-10-10 12:18:43 -05:00
Jeremy Allison
7ccf45684a r21880: Make client and server calls into encryption code symetrical, 
depending on encryption context pointer.
Jeremy.
(This used to be commit d3f3ced6c8)
 2007-10-10 12:18:43 -05:00
Jeremy Allison
c48b610b51 r21876: Start adding in the seal implementation - prototype code 
for the server side enc. (doesn't break anything).
I'll keep updating this until I've got NTLM seal working
on both client and server, then add in the gss level
seal.
Jeremy.
(This used to be commit 530ac29abf)
 2007-10-10 12:18:42 -05:00
Jeremy Allison
ecd496f066 r21865: Add in the stubs for SMB transport encryption. Will flesh 
these out as I implement. Don't add to SAMBA_3_0_25, this
is experimental code.
NFSv4 you're now officially on notice... :-).
Jeremy.
(This used to be commit 5bfe638f21)
 2007-10-10 12:18:40 -05:00