11 Commits

Author	SHA1	Message	Date
Andrew Tridgell	729b2f41c9	r995: - renamed many of our crypto routines to use the industry standard ... names rather than our crazy naming scheme. So DES is now called des_crypt() rather than smbhash() - added the code from the solution of the ADS crypto challenge that allows Samba to correctly handle a 128 bit session key in all of the netr_ServerAuthenticateX() varients. A huge thanks to Luke Howard from PADL for solving this one! - restructured the server side rpc authentication to allow for other than NTLMSSP sign and seal. This commit just adds the structure, the next commit will add schannel server side support. - added 128 bit session key support to our client side code, and testing against w2k3 with smbtorture. Works well.	2007-10-10 12:56:25 -05:00
Stefan Metzmacher	57151e80eb	r962: convert 'unsigned' and 'unsigned int' to uint_t ... metze	2007-10-10 12:56:23 -05:00
Stefan Metzmacher	9f914e4af9	r961: convert 'uchar' to 'uint8_t' ... metze	2007-10-10 12:56:23 -05:00
Stefan Metzmacher	18062d2ed9	r960: convert 'unsigned int' to uint_t in the most places ... metze	2007-10-10 12:56:23 -05:00
Stefan Metzmacher	b5378803fd	r943: change samba4 to use 'uint8_t' instead of 'unsigned char' ... metze	2007-10-10 12:56:21 -05:00
Andrew Tridgell	a8056e3294	r935: remove unused variable	2007-10-10 12:56:20 -05:00
Stefan Metzmacher	0e5517d937	r884: convert samba4 to use [u]int32_t instead of [u]int32 ... metze	2007-10-10 12:56:15 -05:00
Andrew Bartlett	399e2e2b11	r874: This patch is a pile of work on NTLMSSP: ... Samba's NTLMSSP code is now fully talloc based, which should go a long way to cleaning up the memory leaks in this code. This also avoids a lot of extra copies of data, as we now allocate the 'return' blobs on a caller-supplied context. I have also been doing a lot of work towards NTLM2 signing and sealing. I have this working for sealing, but not for the verifier (MD5 integrity check on the stream) which is still incorrect. (I can aim a rpcecho sinkdata from a Win2k3 box to my server, and the data arrives intact, but the signature check fails. It does however match the test values I have...). The new torture test is cludged in - when we get a unit test suite back, I'll happliy put it in the 'right' place.... Andrew Bartlett	2007-10-10 12:56:14 -05:00
Andrew Tridgell	05db0b9d94	- modified the dcerpc client security code to be generic, so ntlmssp ... and schannel are both instances of possible security modules - added schannel sign and sign/seal support to the dcerpc client code. You select it with binding options of "schannel,sign" or "schannel,seal".	-
Andrew Tridgell	c18c9b5585	signed DCERPC over TCP now works ! ... * moved ntlmssp code into libcli/auth/, and updated to latest ntlmssp code from samba3 (thanks Andrew! the new interface is great) * added signing/ntlmssp support in the dcerpc code * added a dcerpc_auth.c module for the various dcerpc auth mechanisms	-
Andrew Tridgell	b0510b5428	first public release of samba4 code	-