1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00
samba-mirror/auth
Stefan Metzmacher 1e3bd3e6ac CVE-2016-2110: auth/gensec: add gensec_may_reset_crypto() infrastructure
[MS-SPNG] requires the NTLMSSP RC4 states to be reset after
the SPNEGO exchange with mechListMic verification (new_spnego).

This provides the infrastructure for this feature.

The 'reset_full' parameter is needed to support the broken
behavior that windows only resets the RC4 states but not the
sequence numbers. Which means this functionality is completely
useless... But we want to work against all windows versions...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
2016-04-12 19:25:23 +02:00
..
credentials pycredentials: Use pytalloc_BaseObject_PyType_Ready() 2016-03-08 01:58:29 +01:00
gensec CVE-2016-2110: auth/gensec: add gensec_may_reset_crypto() infrastructure 2016-04-12 19:25:23 +02:00
kerberos auth: Fix picky const warnings in gssapi_pac 2015-11-23 15:17:18 +01:00
ntlmssp CVE-2016-2110: auth/ntlmssp: let gensec_ntlmssp_client_start require NTLM2 (EXTENDED_SESSIONSECURITY) when using ntlmv2 2016-04-12 19:25:22 +02:00
auth_sam_reply.c Remove a number of NT_STATUS_HAVE_NO_MEMORY_AND_FREE macros from the codebase. 2014-03-05 16:33:21 +01:00
auth_sam_reply.h auth: avoid overwriting the auth_sam_reply.h header all the time. 2014-05-12 17:49:46 +02:00
common_auth.h s4-auth: Do not override the NT_STATUS_NOT_IMPLEMENTED error for winbindd 2014-07-04 02:52:35 +02:00
wbc_auth_util.c auth: add missing includes to auth/wbc_auth_util.c 2014-11-14 23:27:05 +01:00
wscript_build auth: avoid overwriting the auth_sam_reply.h header all the time. 2014-05-12 17:49:46 +02:00