db6ae9ed23
Add explicit buf arg to cli_encrypt_message and cli_calculate_sign_mac
2008-02-28 13:12:34 +01:00
c4e5a50504
Refactor the crypto code after a very helpful conversation
...
with Volker. Mostly making sure we have data on the incoming
packet type, not stored in the smb header.
Jeremy.
2008-01-04 12:56:23 -08:00
d78045601a
Add SMB encryption. Still fixing client decrypt but
...
negotiation works.
Jeremy.
2007-12-26 17:12:36 -08:00
5c6c8e1fe9
[GLUE] Rsync SAMBA_3_2_0 SVN r25598 in order to create the v3-2-test branch.
2007-10-10 15:34:30 -05:00
b0132e94fc
r23784: use the GPLv3 boilerplate as recommended by the FSF and the license text
2007-10-10 12:28:22 -05:00
407e6e695b
r23779: Change from v2 or later to v3 or later.
...
Jeremy.
2007-10-10 12:28:20 -05:00
a66a04e9f1
r22747: Fix some C++ warnings
2007-10-10 12:21:54 -05:00
2d80a96120
r22391: Looks bigger than it is. Make "inbuf" available
...
to all callers of smb_setlen (via set_message()
calls). This will allow the server to reflect back
the correct encryption context.
Jeremy.
2007-10-10 12:19:30 -05:00
b49e90335d
r22389: Start preparing for multiple encryption contexts in the
...
server. Allow server to reflect back to calling client
the encryption context that was sent.
Jeremy.
2007-10-10 12:19:30 -05:00
11fa0ca9e2
r22358: Use gss error to NTSTATUS mapping function for errors.
...
Jeremy.
2007-10-10 12:19:29 -05:00
29933600cf
r22016: Try and fix the build - move things out of proto.h
...
Jeremy.
2007-10-10 12:19:02 -05:00
22eaed76f0
r22013: Move to SSPI framing (sig first in NTLM).
...
Jeremy
2007-10-10 12:19:01 -05:00
6b923acfee
r21997: Implement the server side of gss seal negotiate.
...
Jeremy.
2007-10-10 12:18:58 -05:00
9785528ddf
r21994: Ignore keepalives in the correct buffer (out not in :-).
...
Jeremy.
2007-10-10 12:18:58 -05:00
ae8f3649f7
r21991: I hate Steve French :-). Add support for encryption
...
contexts....
Jeremy.
2007-10-10 12:18:58 -05:00
fbc569b530
r21969: Start working on the gss-side of the server negotiation.
...
Jeremy.
2007-10-10 12:18:54 -05:00
662344d1ec
r21926: Fix missing enum specifier pointed out by Don McCall @ HP.
...
Thanks Don !
Jeremy.
2007-10-10 12:18:49 -05:00
00f58951b4
r21923: Add in the gss decrypt.
...
Jeremy.
2007-10-10 12:18:49 -05:00
1b828f051d
r21922: Fixed the build by rather horrid means. I really need
...
to restructure libsmb/smb_signing.c so it isn't in
the base libs path but lives in libsmb instead (like
smb_seal.c does).
Jeremy.
2007-10-10 12:18:49 -05:00
a226645353
r21917: Start to do the gss versions of sign+seal.
...
Jeremy.
2007-10-10 12:18:48 -05:00
a184bdbe3c
r21916: Fix couple of "return" calls on void functions.
...
Ensure we ignore reqests to free keepalive buffers
as we only copied these.
Jeremy.
2007-10-10 12:18:48 -05:00
80810af7d1
r21912: There's no point checksumming the packet length
...
this already has to be right. This makes the
signed+sealed area the same as it will be with
gss calls. Now to go implement them.
Jeremy.
2007-10-10 12:18:48 -05:00
d34584cb5c
r21903: Get the length calculations right (I always forget
...
the 4 byte length isn't included in the length :-).
We now have working NTLMSSP transport encryption
with sign+seal. W00t!
Jeremy.
2007-10-10 12:18:47 -05:00
783a7b3085
r21897: Add in a basic raw NTLM encrypt request. Now
...
for testing.
Jeremy.
2007-10-10 12:18:46 -05:00
6b5ff7bd59
r21894: Some refactoring of server side encryption context. Support
...
"raw" NTLM auth (no spnego).
Jeremy.
2007-10-10 12:18:46 -05:00
638b03242d
r21883: Try and fix the build by removing the prototypes for
...
functions that take a gss context handle in includes.h
Jeremy.
2007-10-10 12:18:43 -05:00
60fc9c0aed
r21882: The server part of the code has to use an AUTH_NTLMSSP struct,
...
not just an NTLMSSP - grr. This complicates the re-use of
common client and server code but I think I've got it right.
Not turned on of valgrinded yet, but you can see it start
to take shape !
Jeremy.
2007-10-10 12:18:43 -05:00
d3f3ced6c8
r21880: Make client and server calls into encryption code symetrical,
...
depending on encryption context pointer.
Jeremy.
2007-10-10 12:18:43 -05:00
530ac29abf
r21876: Start adding in the seal implementation - prototype code
...
for the server side enc. (doesn't break anything).
I'll keep updating this until I've got NTLM seal working
on both client and server, then add in the gss level
seal.
Jeremy.
2007-10-10 12:18:42 -05:00
5bfe638f21
r21865: Add in the stubs for SMB transport encryption. Will flesh
...
these out as I implement. Don't add to SAMBA_3_0_25, this
is experimental code.
NFSv4 you're now officially on notice... :-).
Jeremy.
2007-10-10 12:18:40 -05:00
