4 Commits

Author	SHA1	Message	Date
Andrew Bartlett	dc9f55dbec	r1294: A nice, large, commit... ... This implements gensec for Samba's server side, and brings gensec up to the standards of a full subsystem. This means that use of the subsystem is by gensec_* functions, not function pointers in structures (this is internal). This causes changes in all the existing gensec users. Our RPC server no longer contains it's own generalised security scheme, and now calls gensec directly. Gensec has also taken over the role of auth/auth_ntlmssp.c An important part of gensec, is the output of the 'session_info' struct. This is now reference counted, so that we can correctly free it when a pipe is closed, no matter if it was inherited, or created by per-pipe authentication. The schannel code is reworked, to be in the same file for client and server. ntlm_auth is reworked to use gensec. The major problem with this code is the way it relies on subsystem auto-initialisation. The primary reason for this commit now.is to allow these problems to be looked at, and fixed. There are problems with the new code: - I've tested it with smbtorture, but currently don't have VMware and valgrind working (this I'll fix soon). - The SPNEGO code is client-only at this point. - We still do not do kerberos. Andrew Bartlett (This used to be commit 07fd885fd488fd1051eacc905a2d4962f8a018ec)	2007-10-10 12:56:49 -05:00
Andrew Bartlett	b1268fc445	r1123: Make all lp_ string functions return 'const char *'. ... Fix other 'const' warnings in the torture code. Andrew Bartlett (This used to be commit 5d39d7497f189da15d659b3f83b7314026040a15)	2007-10-10 12:56:38 -05:00
Andrew Tridgell	8a3d1a5fb7	r1042: added testing of 128 bit schannel session keys ... (This used to be commit 96fc2b6f1e7372cc3646bd52172187b8a689c15a)	2007-10-10 12:56:33 -05:00
Andrew Tridgell	a1318baa55	r1041: - pulled the domain join code out of the netlogon test and made it a separate utility function, to allow ... multiple torture tests to temporarily join a domain - fixed a session key size problem - added a schannel test suite - allow schannel to work with ncacn_ip_tcp (This used to be commit 36f05e4d575099fcb957b8a55781c38dcd2e1177)	2007-10-10 12:56:33 -05:00