Stefan Metzmacher 6afb6b67a1 s3:auth: add make_{server,session}_info_anonymous() ... It's important to have them separated from make_{server,session}_info_guest(), because there's a fundamental difference between anonymous (the client requested no authentication) and guest (the server lies about the authentication failure). The following is the difference between guest and anonymous token: security_token: struct security_token - num_sids : 0x0000000a (10) - sids: ARRAY(10) - sids : S-1-5-21-3793881525-3372187982-3724979742-501 - sids : S-1-5-21-3793881525-3372187982-3724979742-514 - sids : S-1-22-2-65534 - sids : S-1-22-2-65533 + num_sids : 0x00000009 (9) + sids: ARRAY(9) + sids : S-1-5-7 sids : S-1-1-0 sids : S-1-5-2 - sids : S-1-5-32-546 sids : S-1-22-1-65533 + sids : S-1-22-2-65534 + sids : S-1-22-2-100004 sids : S-1-22-2-100002 sids : S-1-22-2-100003 + sids : S-1-22-2-65533 privilege_mask : 0x0000000000000000 (0) ... unix_token : * unix_token: struct security_unix_token uid : 0x000000000000fffd (65533) gid : 0x000000000000fffe (65534) - ngroups : 0x00000004 (4) - groups: ARRAY(4) + ngroups : 0x00000005 (5) + groups: ARRAY(5) groups : 0x000000000000fffe (65534) - groups : 0x000000000000fffd (65533) + groups : 0x00000000000186a4 (100004) groups : 0x00000000000186a2 (100002) groups : 0x00000000000186a3 (100003) + groups : 0x000000000000fffd (65533) info: struct auth_user_info account_name : * - account_name : 'nobody' + account_name : 'ANONYMOUS LOGON' user_principal_name : NULL user_principal_constructed: 0x00 (0) domain_name : * - domain_name : 'SAMBA-TEST' + domain_name : 'NT AUTHORITY' dns_domain_name : NULL - full_name : NULL - logon_script : NULL - profile_path : NULL - home_directory : NULL - home_drive : NULL - logon_server : NULL + full_name : * + full_name : 'Anonymous Logon' + logon_script : * + logon_script : '' + profile_path : * + profile_path : '' + home_directory : * + home_directory : '' + home_drive : * + home_drive : '' + logon_server : * + logon_server : 'LOCALNT4DC2' last_logon : NTTIME(0) last_logoff : NTTIME(0) acct_expiry : NTTIME(0) last_password_change : NTTIME(0) allow_password_change : NTTIME(0) force_password_change : NTTIME(0) logon_count : 0x0000 (0) bad_password_count : 0x0000 (0) - acct_flags : 0x00000000 (0) + acct_flags : 0x00000010 (16) authenticated : 0x00 (0) security_token: struct security_token num_sids : 0x00000006 (6) sids: ARRAY(6) + sids : S-1-5-7 + sids : S-1-1-0 + sids : S-1-5-2 sids : S-1-22-1-65533 sids : S-1-22-2-65534 sids : S-1-22-2-65533 - sids : S-1-1-0 - sids : S-1-5-2 - sids : S-1-5-32-546 privilege_mask : 0x0000000000000000 (0) BUG: https://bugzilla.samba.org/show_bug.cgi?id=13328 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>		2018-03-15 21:54:17 +01:00
..
auth_builtin.c	lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)	2017-04-22 01:17:00 +02:00
auth_generic.c	auth/common: add support for auth4_ctx->check_ntlm_password_send/recv()	2017-08-07 15:20:03 +02:00
auth_ntlmssp.c	rpc: Always supply both the remote and local address to the auth subsystem	2017-03-29 02:37:27 +02:00
auth_sam.c	s3:auth: Add FALL_THROUGH statements in auth_sam.c	2018-03-01 04:37:42 +01:00
auth_samba4.c	lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)	2017-04-22 01:17:00 +02:00
auth_script.c	lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)	2017-04-22 01:17:00 +02:00
auth_unix.c	lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)	2017-04-22 01:17:00 +02:00
auth_util.c	s3:auth: add make_{server,session}_info_anonymous()	2018-03-15 21:54:17 +01:00
auth_winbind.c	lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)	2017-04-22 01:17:00 +02:00
auth.c	s3:auth: remove lp_auth_methods() handling	2017-12-13 20:34:24 +01:00
check_samsec.c	auth: Use "all_zero" where appropriate	2017-01-03 16:04:28 +01:00
pampass.c	s3:auth: Add FALL_THROUGH statements in pampass.c	2018-03-01 04:37:42 +01:00
pass_check.c	auth: Remove support for HAVE_TRUNCATED_SALT from pass_check.c	2014-04-15 12:32:09 +02:00
proto.h	s3:auth: add make_{server,session}_info_anonymous()	2018-03-15 21:54:17 +01:00
server_info_sam.c	s3-auth: Steal the memory to avoid duplication.	2014-03-13 15:08:26 +01:00
server_info.c	s3/auth: add create_info6_from_pac()	2018-02-10 08:35:17 +01:00
token_util.c	s3:auth: remove static from finalize_local_nt_token()	2018-03-15 21:54:17 +01:00
user_info.c	rpc: Always supply both the remote and local address to the auth subsystem	2017-03-29 02:37:27 +02:00
user_krb5.c	Correct "perfom" typos.	2017-02-22 08:26:22 +01:00
user_util.c	include: Create system/nis.h in libreplace	2018-01-22 12:26:20 +01:00
wscript_build	build: deal with recent glibc sunrpc header removal	2018-01-22 12:26:20 +01:00