Andrew Bartlett d139d77ae3 auth: Allow NTLMv1 if MSV1_0_ALLOW_MSVCHAPV2 is given and re-factor 'ntlm auth =' ...

The ntlm auth parameter is expanded to more clearly describe the
role of each option, and to allow the new mode that permits MSCHAPv2
(as declared by the client over the NETLOGON protocol) while
still banning NTLMv1.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12252
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Based on a patch by Mantas Mikulėnas <mantas@utenos-kolegija.lt>:

Commit 0b500d413c5b ("Added MSV1_0_ALLOW_MSVCHAPV2 flag to ntlm_auth")
added the --allow-mschapv2 option, but didn't implement checking for it
server-side. This implements such checking.

Additionally, Samba now disables NTLMv1 authentication by default for
security reasons. To avoid having to re-enable it globally, 'ntlm auth'
becomes an enum and a new setting is added to allow only MSCHAPv2.

Signed-off-by: Mantas Mikulėnas <mantas@utenos-kolegija.lt>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>

2017-07-04 06:57:20 +02:00

..

auth

auth3: prepare the logic for "map untrusted to domain = auto"

2017-06-16 03:21:29 +02:00

build

…

client

s3:libsmb: remove unused 'bool show_hdr' from cli_cm_open()

2017-06-27 16:57:47 +02:00

exports

…

groupdb

Correct "errror" typos.

2017-02-22 08:26:22 +01:00

include

s3/smbd: remove unneeded flags argument from SMB_VFS_OFFLOAD_WRITE_SEND

2017-07-03 19:59:08 +02:00

intl

lib: Give util_paths.c its own header

2017-06-24 01:21:10 +02:00

lib

s3:libsmb: remove unused 'bool show_hdr' from cli_cm_open()

2017-06-27 16:57:47 +02:00

libads

s3:libads: make use of secrets_*_password_change() in ads_change_trust_account_password()

2017-06-27 16:57:46 +02:00

libgpo

s3-gpo: Fix CID #1405972 Resource leak

2017-05-09 23:20:08 +02:00

libnet

s3:libnet: make use of secrets_store_JoinCtx()

2017-06-27 16:57:46 +02:00

librpc

secrets.idl: add secrets_domain_info that will be used in secrets.tdb for machine account trusts

2017-06-27 16:57:46 +02:00

libsmb

samlogon_cache: add netsamlog_cache_for_all()

2017-07-03 19:59:09 +02:00

locale

Correct "descriptior" typos.

2017-02-22 08:26:22 +01:00

locking

s3/locking: make find_share_mode_entry public

2017-05-28 14:50:18 +02:00

modules

s3/smbd: remove unneeded flags argument from SMB_VFS_OFFLOAD_WRITE_SEND

2017-07-03 19:59:08 +02:00

nmbd

Correct "errror" typos.

2017-02-22 08:26:22 +01:00

param

auth: Allow NTLMv1 if MSV1_0_ALLOW_MSVCHAPV2 is given and re-factor 'ntlm auth ='

2017-07-04 06:57:20 +02:00

passdb

s3:secrets: remove unused secrets_store_[prev_]machine_password()

2017-06-27 16:57:46 +02:00

printing

s3: VFS: Change SMB_VFS_CHDIR to use const struct smb_filename * instead of const char *.

2017-07-01 03:07:11 +02:00

profile

s3-profile: reduce dependencies of smbprofile.h

2016-03-28 20:45:16 +02:00

registry

s3-rpc_cli: add winreg_add_core_driver()

2017-05-09 16:43:13 +02:00

rpc_client

libcli/auth: pass an array of nt_hashes to netlogon_creds_cli_auth*()

2017-06-27 16:57:45 +02:00

rpc_server

s3-rpc_server: Disable the NETLOGON server by default

2017-07-04 06:57:20 +02:00

rpcclient

s3:trusts_util: pass dcname to trust_pw_change()

2017-06-27 16:57:45 +02:00

script

s3:tests: Do *NOT* flush the complete gencache!

2017-06-28 22:18:16 +02:00

selftest

s3:selftest: run samba3.blackbox.smbclient_large_file (NTLM) with NT1 and SMB3

2017-06-27 16:57:48 +02:00

services

Update smbrun to allow for settings environment variables.

2016-10-13 04:26:26 +02:00

smbd

s3/smbd: remove unneeded flags argument from SMB_VFS_OFFLOAD_WRITE_SEND

2017-07-03 19:59:08 +02:00

torture

s3: VFS: Change SMB_VFS_REALPATH to take and return struct smb_filename * instead of char *.

2017-07-01 03:07:11 +02:00

utils

net: add net cache samlogon list|show|ndrdump|delete

2017-07-04 00:12:46 +02:00

web

…

winbindd

s3:winbind: Move debug statement into the error handling

2017-06-28 22:18:16 +02:00

.clang_complete

lib: Remove tdb_compat

2015-03-17 11:30:52 +01:00

.dmallocrc

…

.indent.pro

…

Doxyfile

…

mainpage.dox

…

smbadduser.in

…

wscript

build: fix build of vfs_posix_eadb module

2017-06-24 01:20:16 +02:00

wscript_build

torture3: Initial test g_lock

2017-06-15 13:19:13 +02:00

wscript_configure_system_ncurses

Transition to waf 1.8: wrapped conf.check_cfg

2015-03-16 03:00:07 +01:00