Stefan Metzmacher fc9df726da CVE-2016-2110: auth/ntlmssp: implement new_spnego support including MIC generation (as client) ...

We now detect a MsvAvTimestamp in target info as indication
of the server to support NTLMSSP_MIC in the AUTH_MESSAGE.

If the client uses NTLMv2 we provide
NTLMSSP_AVFLAG_MIC_IN_AUTHENTICATE_MESSAGE and valid MIC.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>

2016-03-29 16:25:40 +02:00

..

gensec_ntlmssp_server.c

CVE-2016-2110: auth/ntlmssp: implement new_spnego support including MIC checking (as server)

2016-03-29 16:25:40 +02:00

gensec_ntlmssp.c

CVE-2016-2110: auth/ntlmssp: implement new_spnego support including MIC checking (as server)

2016-03-29 16:25:40 +02:00

ntlmssp_client.c

CVE-2016-2110: auth/ntlmssp: implement new_spnego support including MIC generation (as client)

2016-03-29 16:25:40 +02:00

ntlmssp_ndr.c

ntlmssp: when pulling messages it is important to clear memory first.

2016-03-29 16:24:31 +02:00

ntlmssp_ndr.h

ntlmssp: Move ntlmssp code to auth/ntlmssp

2011-10-18 13:13:31 +11:00

ntlmssp_private.h

CVE-2016-2110: auth/ntlmssp: let ntlmssp_handle_neg_flags() return NTSTATUS

2016-03-29 16:25:37 +02:00

ntlmssp_server.c

CVE-2016-2110: auth/ntlmssp: implement new_spnego support including MIC checking (as server)

2016-03-29 16:25:40 +02:00

ntlmssp_sign.c

CVE-2016-2110: auth/ntlmssp: implement gensec_ntlmssp_may_reset_crypto()

2016-03-29 16:25:39 +02:00

ntlmssp_util.c

CVE-2016-2110: auth/ntlmssp: don't let ntlmssp_handle_neg_flags() change ntlmssp_state->use_ntlmv2

2016-03-29 16:25:38 +02:00

ntlmssp.c

CVE-2016-2110: auth/ntlmssp: implement gensec_ntlmssp_may_reset_crypto()

2016-03-29 16:25:39 +02:00

ntlmssp.h

CVE-2016-2110: auth/ntlmssp: implement new_spnego support including MIC generation (as client)

2016-03-29 16:25:40 +02:00

wscript_build

auth/ntlmssp: implement GENSEC_FEATURE_NTLM_CCACHE

2016-03-29 16:24:37 +02:00