Stefan Metzmacher
282a2d8591
s4:ntlmssp: calculate server names at startup and store them in (gensec_)ntlmssp_state->server.*
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
133a3e4ce8
s4:ntlmssp: replace server_role by a server.is_standalone in (gensec_)ntlmssp_state
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
ee240799b6
s4:ntlmssp: keep struct gensec_ntlmssp_context in gensec_security->private_data
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
a0522a5b26
s4:ntlmssp: remove gensec_security from (gensec_)ntlmssp_state
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
32d822af81
s4:ntlmssp: remove backend specifix stuff from (gensec_)ntlmssp_state
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
d5cbfbb93a
s4:ntlmssp: remove mem_ctx from check_password() callback to match s3
...
metze
2009-12-29 17:06:25 +01:00
Stefan Metzmacher
f31d144e70
s4:ntlmssp_server: always call ntlmssp_server_postauth() and decide there if it's a noop
...
metze
2009-12-29 17:06:25 +01:00
Stefan Metzmacher
994d34b949
s4:ntlmssp_server: don't use a mem_ctx for ntlmssp_server_auth()
...
metze
2009-12-29 17:06:25 +01:00
Stefan Metzmacher
3f04b60fb9
s4:ntlmssp_server: don't use mem_ctx in auth_ntlmssp_check_password()
...
metze
2009-12-29 17:06:24 +01:00
Stefan Metzmacher
7d4692fa43
s4:ntlmssp_server: clear session key in ntlmssp_server_preauth()
...
metze
2009-12-29 17:06:24 +01:00
Stefan Metzmacher
dea456089a
s4:ntlmssp: use data_blob_null in ntlmssp_server_auth()
...
metze
2009-12-29 17:06:24 +01:00
Stefan Metzmacher
60b9434492
s4:ntlmssp_server: remove unused variable
...
metze
2009-12-29 17:06:23 +01:00
Stefan Metzmacher
a8e61ac084
s4:auth/ntlmssp: let get_challenge() return a NTSTATUS and fill a stack buffer
...
metze
2009-12-29 17:06:23 +01:00
Andrew Bartlett
0809696dbf
s4:auth Change 'get_challenge' API to be more like Samba3
...
It is just easier to fill in the known to be 8 byte challenge than
stuff about with allocated pointers.
Andrew Bartlett
2009-12-22 17:29:15 +11:00
Andreas Schneider
1e5488859a
s4-gensec: Replace gensec_get_peer_addr with new tsocket based fn.
2009-12-16 20:28:38 +01:00
Andrew Tridgell
f8109b0f49
s4: ran minimal_includes.pl on source4/auth/ntlmssp
2009-10-20 16:05:07 +11:00
Matthias Dieter Wallnöfer
ea60b72c46
s4:ntlmssp server - use also here the new "lp_dnsdomain()" call
2009-10-15 10:32:16 +02:00
Günther Deschner
38d677bdf2
s4-ntlmssp: use interface constants in TargetInfo blob.
...
Guenther
2009-08-28 10:09:13 +02:00
Günther Deschner
e8c19f31b3
s4-ntlmssp: use NTLMSSP headers from IDL and remove duplicate constants.
...
Guenther
2009-08-28 10:09:06 +02:00
Andrew Bartlett
6dd6ccbdc9
s4:auth It is easier to copy the session key than get talloc right.
...
The session keys as supplied already have a reference on them, so
stealing them creates challenges. For 16 bytes, it is just easier to
be consistant and copy them.
Andrew Bartlett
2009-07-07 13:27:47 +10:00
Andrew Tridgell
b2c3c08b46
fixed the use of talloc_steal in ntlmssp_server
...
The previous use of talloc_steal could cause a steal of a pointer that
had references. This ensures that doesn't happen
2009-07-01 15:15:36 +10:00
Andrew Bartlett
7a54cd041e
Remove unused headers
2009-04-19 22:01:09 +02:00
Andrew Bartlett
dbcd80ed01
Fix Samba4 build errors with common libcli/samsync
2009-04-16 10:17:17 +10:00
Andrew Bartlett
71632a1697
Remove auth/ntlm as a dependency of GENSEC by means of function pointers.
...
When starting GENSEC on the server, the auth subsystem context must be
passed in, which now includes function pointers to the key elements.
This should (when the other dependencies are fixed up) allow GENSEC to
exist as a client or server library without bundling in too much of
our server code.
Andrew Bartlett
2009-02-13 10:24:16 +11:00
Stefan Metzmacher
582b27be24
s4:auth: try to fix the build on Solaris
...
MAXHOSTNAMELEN comes in via system/network.h now.
metze
2009-01-31 11:34:12 +01:00
Jelmer Vernooij
b034c519f5
Add gensec_settings structure. This wraps loadparm_context for now, but
...
should in the future only contain some settings required for gensec.
2008-11-02 02:05:48 +01:00
Jelmer Vernooij
3a6b88f9f9
Remove unused argument iconv_convenience.
2008-11-01 20:58:41 +01:00
Jelmer Vernooij
922a29992e
Remove iconv_convenience parameter from simple string push/pull
...
functions.
2008-10-24 03:40:09 +02:00
Jelmer Vernooij
6925202bde
Move source4/lib/crypto to lib/crypto.
2008-09-24 15:30:23 +02:00
Matthias Dieter Wallnöfer
d173644f10
NTLMSSP Server: Correctly fills in the DNS server name and server domain
...
Don't rely on "get*" system calls but rather on SAMBA "lp_*" calls.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-09-19 16:33:30 +02:00
Stefan Metzmacher
d087545deb
auth/ntlmssp: don't crash when the backend give no challenge
...
metze
(This used to be commit c01fee80a7
)
2008-08-01 16:10:59 +02:00
Andrew Bartlett
714b3a87d2
Fix the build after the auth/ -> auth/ntlm/ rename
...
I need to fix up the header inclusion, but this fixes things for now.
Andrew Bartlett
(This used to be commit 7c07edb24b
)
2008-05-05 19:28:38 +10:00
Jelmer Vernooij
21fc767378
Specify event_context to ldb_wrap_connect explicitly.
...
(This used to be commit b4e1ae07a2
)
2008-04-17 12:23:44 +02:00
Jelmer Vernooij
afe3e8172d
Install public header files again and include required prototypes.
...
(This used to be commit 47ffbbf674
)
2008-04-02 04:53:27 +02:00
Jelmer Vernooij
6f79af9d13
r26652: msrpc_parse/msrpc_gen: Add iconv_convenience argument.
...
(This used to be commit e886f1bc0d
)
2008-01-03 12:33:36 -06:00
Jelmer Vernooij
1fbdd6ef1d
r26264: pass name resolve order explicitly, use torture context for settings in dssync tests.
...
(This used to be commit c7eae1c784
)
2007-12-21 05:47:39 +01:00
Jelmer Vernooij
ecea5ce245
r26260: Store loadparm context in gensec context.
...
(This used to be commit b9e3a4862e
)
2007-12-21 05:47:34 +01:00
Jelmer Vernooij
181aab56d5
r26221: Add loadparm_context parameter to auth_context_create.
...
(This used to be commit a9a9634df8
)
2007-12-21 05:46:58 +01:00
Jelmer Vernooij
3642f3b40d
r25552: Convert to standard bool type.
...
(This used to be commit b8d6b82f12
)
2007-10-10 15:07:54 -05:00
Jelmer Vernooij
60a1046c5c
r25430: Add the loadparm context to all parametric options.
...
(This used to be commit fd697d77c9
)
2007-10-10 15:07:31 -05:00
Jelmer Vernooij
37d53832a4
r25398: Parse loadparm context to all lp_*() functions.
...
(This used to be commit 3fcc960839
)
2007-10-10 15:07:25 -05:00
Jelmer Vernooij
98b57d5eb6
r25035: Fix some more warnings, use service pointer rather than service number in more places.
...
(This used to be commit df9cebcb97
)
2007-10-10 15:05:43 -05:00
Jelmer Vernooij
ffeee68e4b
r25026: Move param/param.h out of includes.h
...
(This used to be commit abe8349f9b
)
2007-10-10 15:05:38 -05:00
Jelmer Vernooij
4a05c3406b
r25005: Avoid pstring.
...
(This used to be commit 777959f862
)
2007-10-10 15:05:31 -05:00
Jelmer Vernooij
cd962355ab
r25000: Fix some more C++ compatibility warnings.
...
(This used to be commit 08bb1ef643
)
2007-10-10 15:05:27 -05:00
Andrew Tridgell
0479a2f1cb
r23792: convert Samba4 to GPLv3
...
There are still a few tidyups of old FSF addresses to come (in both s3
and s4). More commits soon.
(This used to be commit fcf38a38ac
)
2007-10-10 14:59:12 -05:00
Andrew Bartlett
222c6dd781
r23680: Make it easier to setup a domain member server - the 'server role'
...
will now control the auth methods, but an override is still available,
ex:
auth methods:domain controller = <methods>
Andrew Bartlett
(This used to be commit b7e727186e
)
2007-10-10 14:59:00 -05:00
Andrew Bartlett
84c5acc615
r19805: Add the (harmless, but apparently default)
...
NTLMSSP_NEGOTIATE_ALWAYS_SIGN flags into the default set.
Andrew Bartlett
(This used to be commit 04709c75af
)
2007-10-10 14:28:21 -05:00
Andrew Bartlett
13dbee3ffe
r19598: Ahead of a merge to current lorikeet-heimdal:
...
Break up auth/auth.h not to include the world.
Add credentials_krb5.h with the kerberos dependent prototypes.
Andrew Bartlett
(This used to be commit 2b569c42e0
)
2007-10-10 14:25:00 -05:00
Stefan Metzmacher
7a845bcb01
r17341: pass a messaging context to auth_context_create()
...
and gensec_server_start().
calling them with NULL for event context or messaging context
is no longer allowed!
metze
(This used to be commit 679ac74e71
)
2007-10-10 14:15:17 -05:00