6 Commits

Author	SHA1	Message	Date
Stefan Metzmacher	c0fc6a6d7f	CVE-2016-2110: auth/ntlmssp: implement new_spnego support including MIC checking (as server) ... We now include a MsvAvTimestamp in our target info as indication for the client to include a NTLMSSP_MIC in the AUTH_MESSAGE. If the client uses NTLMv2 we check NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE and require a valid MIC. This is still disabled if the "map to guest" feature is used. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>	2016-04-12 19:25:23 +02:00
Stefan Metzmacher	64fc015a85	auth/ntlmssp: GENSEC_FEATURE_SIGN_PKT_HEADER is always supported ... Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2014-01-07 00:27:11 +01:00
Stefan Metzmacher	71c63e85e7	auth/gensec: introduce gensec_internal.h ... We should treat most gensec related structures private. It's a long way, but this is a start. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2013-08-10 09:19:02 +02:00
Andrew Bartlett	239c7a355c	auth/ntlmssp: Remove gensec_security element from gensec_ntlmssp_state ... This just means there is one less pointer to ensure we initialise. Andrew Bartlett	2012-03-09 14:31:24 +11:00
Andrew Bartlett	968b3674b1	ntlmssp: Prepare gensec_ntlmssp_start() for broader use ... This moves the allocation of the ntlmssp pointer back to the callers. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>	2011-10-18 13:13:31 +11:00
Andrew Bartlett	0c6e4adcb2	ntlmssp: Move ntlmssp code to auth/ntlmssp ... This brings in the code from both libcli/auth and source4/auth/ntlmssp. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>	2011-10-18 13:13:31 +11:00