1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-08 21:18:16 +03:00
samba-mirror/source3/libsmb
Stefan Metzmacher 7d9fd64f38 s3:libsmb: handle the smb signing states the same in the krb5 and ntlmssp cases
SMB signing works the same regardless of the used auth mech.

We need to start with the temp signing ("BSRSPYL ")
and the session setup response with NT_STATUS_OK
is the first signed packet.

Now we set the krb5 session key if we got the NT_STATUS_OK
from the server and then recheck the packet.

All this is needed to make the fallback from krb5 to
ntlmssp possible. This commit also resets the cli->vuid
value to 0, if the krb5 auth didn't succeed. Otherwise
the server handles NTLMSSP packets as krb5 packets.

The restructuring of the SMB signing code is needed to
make sure the krb5 code only starts the signing engine
on success. Otherwise the NTLMSSP fallback could not initialize
the signing engine (again).

metze
2009-01-12 13:22:40 +01:00
..
async_smb.c struct async_req doesn't really need to carry an event_context 2009-01-03 19:07:57 +01:00
cliconnect.c s3:libsmb: handle the smb signing states the same in the krb5 and ntlmssp cases 2009-01-12 13:22:40 +01:00
clidfs.c Fix bug #6021 - smbclient du command does not recuse properly 2009-01-08 15:41:49 -08:00
clidgram.c Import changes from upstream libndr. 2008-10-13 15:01:28 +02:00
clientgen.c Attempt to fix bug 5953: Make cli_send_smb_direct_writeX use writev 2008-12-29 13:24:28 +01:00
clierror.c Make map_errno_from_nt_status() a generic call, not just a cli specific one. 2008-10-07 14:43:42 -07:00
clifile.c Pass "bytes_alignment" up through cli_request_send 2008-12-19 14:53:29 +01:00
clifsinfo.c Add Derrick Schommer's <dschommer@F5.com> kerberos delegation patch. Some 2008-08-08 14:32:15 -07:00
clikrb5.c s3-asn1: make all of s3 asn1 code do a proper asn1_init() first. 2008-10-22 21:37:36 +02:00
clilist.c (Fixed) Final part of fix for bug #5953 - smbclient crashes: cli_list_new segmentation fault (with NAS-BASIC server). 2008-12-16 13:40:38 -08:00
climessage.c Cleanup size_t return values in convert_string_allocate 2008-04-11 11:33:33 +02:00
clioplock.c Add SMB encryption. Still fixing client decrypt but 2007-12-26 17:12:36 -08:00
cliprint.c Add SMB encryption. Still fixing client decrypt but 2007-12-26 17:12:36 -08:00
cliquota.c Add iconv_convenience argument to size functions. 2009-01-01 04:45:33 +01:00
clirap2.c fix build warning. 2008-07-15 23:06:48 +02:00
clirap.c Move cli_api_pipe() to its only user cli_pipe.c 2009-01-11 22:53:24 +01:00
clireadwrite.c struct async_req doesn't really need to carry an event_context 2009-01-03 19:07:57 +01:00
clisecdesc.c Convert cli_query_secdesc to the async trans call 2008-09-09 17:37:34 +02:00
clispnego.c s3-build: fix some const build warnings. 2008-10-23 01:43:41 +02:00
clistr.c Remove pstrings from client/client.c by doing a large rewrite. 2007-12-06 17:16:33 -08:00
clitrans.c Pass "bytes_alignment" up through cli_request_send 2008-12-19 14:53:29 +01:00
conncache.c Cleanup of DC enumeration in get_dcs() 2008-09-04 11:50:25 -07:00
credentials.c Remove unused creds_client_check and creds_client_step. 2008-02-17 03:08:42 +01:00
dsgetdcname.c s3:dsgetdcname: retry with the clients site 2008-12-13 11:47:13 +01:00
errormap.c Add SMB encryption. Still fixing client decrypt but 2007-12-26 17:12:36 -08:00
libsmb_cache.c Continued revamping of libsmbclient. 2008-03-03 18:13:33 -05:00
libsmb_compat.c The compatibility function also should have a const buffer pointer 2008-07-16 10:45:09 -04:00
libsmb_context.c Remove the global "cmdline_auth_info" from source3/lib/util.c 2008-12-14 14:00:43 +01:00
libsmb_dir.c commit b520befe6f51644d20434add9864d7a2fa30aa2e 2008-12-16 12:20:40 -05:00
libsmb_file.c Error return is False, not -1 2008-10-24 10:31:31 -04:00
libsmb_misc.c Additional revamped libsmbclient documentation 2008-03-01 20:47:22 -05:00
libsmb_path.c Continued revamping of libsmbclient. 2008-03-03 18:13:33 -05:00
libsmb_printjob.c Continued revamping of libsmbclient. 2008-03-03 18:13:33 -05:00
libsmb_server.c Make cli_negprot return NTSTATUS instead of bool 2008-12-19 10:28:30 +01:00
libsmb_setget.c Continued revamping of libsmbclient. 2008-03-03 18:13:33 -05:00
libsmb_stat.c Continued revamping of libsmbclient. 2008-03-03 18:13:33 -05:00
libsmb_xattr.c Make a CONST_DISCARD unnecessary by applying some const 2008-12-31 19:33:25 +01:00
namecache.c Revert "Pass NULL to gencache_get when we are not interested in the timeout value" 2008-07-11 17:53:25 +02:00
namequery_dc.c s3: Change sockaddr util function names for consistency 2008-12-03 10:40:20 -08:00
namequery.c s3:libsmb/namequery.c: add saf_join_store() function 2008-12-13 11:42:35 +01:00
nmblib.c Remove two write-only variables 2008-12-19 13:18:57 +01:00
nterr.c nterrors: add NT_STATUS_DS_BUSY. 2008-11-10 21:46:24 +01:00
ntlm_check.c ntlm_check.c: Sync some changes from Samba 4. 2008-11-01 18:50:06 +01:00
ntlmssp_parse.c Adding missing calls to va_end(). 2008-01-27 09:33:42 +01:00
ntlmssp_sign.c Fix build with arc4. 2008-09-24 19:20:33 +02:00
ntlmssp.c remove the explicit mem_ctx from ntlmssp_state, use the state itself 2008-11-30 17:15:19 +01:00
passchange.c Fix more asprintf and "ignoring return code" warnings from gcc 4.3. 2008-12-31 16:30:11 -08:00
pwd_cache.c r23784: use the GPLv3 boilerplate as recommended by the FSF and the license text 2007-10-10 12:28:22 -05:00
samlogon_cache.c s3-build: no need to duplicate generated ndr_ prototypes. 2008-10-20 19:47:00 +02:00
smb_seal.c Fix for crash bug freeing a non-malloc'ed buffer if the client sends a non-encrypted packet with the crypto state set. 2008-12-05 13:20:55 -08:00
smb_share_modes.c Remove a global variable 2009-01-01 20:01:32 +01:00
smb_signing.c Revert "Fix signing bug found by Volker. That one was *subtle*." 2008-05-13 16:29:47 +02:00
smbdes.c Fix "warning: initialization discards qualifiers from pointer target type" 2008-10-12 14:13:24 +02:00
smbencrypt.c Use common byteorder.h. 2008-10-12 16:17:21 +02:00
smberr.c Some pstring removal 2007-11-11 21:34:40 -08:00
spnego.c s3-build: fix another build warning with the new ASN1 code. 2008-10-23 11:46:18 +02:00
trustdom_cache.c Revert "Pass NULL to gencache_get when we are not interested in the timeout value" 2008-07-11 17:53:25 +02:00
trusts_util.c Add TALLOC_CTX pointer to generate_random_str(), for consistency with 2008-10-19 10:05:48 +02:00
unexpected.c Fix some typos 2008-03-08 12:31:21 +01:00