1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
samba-mirror/source4/auth
Stefan Metzmacher de553b52f2 s4:gensec/spnego: only try the mechs that match the client given ones
Windows-Members of NT4/Samba3 domains, send

MechTypes:
1.3.6.1.4.1.311.2.2.10 [NTLMSSP]
1.2.840.48018.1.2.2    [krb5 broken]
1.2.840.113554.1.2.2   [krb5]

MechToken for NTLMSSP.

This patch makes sure we start NTLMSSP with the given MechToken,
instead of trying to pass the NTLMSSP MechToken to the krb5 backend
first. As that would fail the authentication with an error
instead of trying fallbacks.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Nov 30 17:03:29 CET 2011 on sn-devel-104
2011-11-30 17:03:29 +01:00
..
gensec s4:gensec/spnego: only try the mechs that match the client given ones 2011-11-30 17:03:29 +01:00
kerberos s4-samba-tool: Add --principal argument to samba-tool domain exportkeytab 2011-11-29 09:20:54 +01:00
ntlm lib/util Rename samba_init_module_fns_run -> samba_module_init_fns_run 2011-10-28 13:10:28 +02:00
ntlmssp gensec: move event context from gensec_*_init() to gensec_update() 2011-10-18 13:13:33 +11:00
auth.h s4-auth Move conversion of security_token to unix_token to auth 2011-07-29 04:24:07 +02:00
pyauth.c pytalloc: Use consistent prefix for functions, add ABI file. 2011-08-10 15:36:21 +02:00
pyauth.h pytalloc: Use consistent prefix for functions, add ABI file. 2011-08-10 15:36:21 +02:00
sam.c s4-sam: don't look in GC NCs for user accounts 2011-10-04 15:08:57 +11:00
samba_server_gensec.c gensec: move event context from gensec_*_init() to gensec_update() 2011-10-18 13:13:33 +11:00
session.c s4-auth Move conversion of security_token to unix_token to auth 2011-07-29 04:24:07 +02:00
session.h Fix public header not to include private (not installed) ones. 2011-03-14 17:01:20 +01:00
system_session.c s4: fix wrong index usage PRIMARY_USER_SID_INDEX when it should have been PRIMARY_GROUP_SID_INDEX 2011-06-19 23:21:08 +02:00
unix_token.c s4-auth log details about any token we fail to convert to a unix token 2011-11-18 14:38:28 +11:00
wscript_build auth: move credentials layer to the top level 2011-10-11 13:41:36 +11:00
wscript_configure s4-waf: mark the wscript files as python so vim/emacs knows how to highlight them 2010-04-06 20:27:11 +10:00