diff options
| author | Alexander Bokovoy <ab@samba.org> | 2012-03-02 16:18:16 +0200 |
|---|---|---|
| committer | Andreas Schneider <asn@cryptomilk.org> | 2012-03-13 12:23:44 +0100 |
| commit | 7d4ed899831a853ec2eef8dcd82d74fdbf568f0e (patch) | |
| tree | 4ff03d559933f3b11ae4c96a3ad357ff4abcda89 /source3/include | |
| parent | e25f830f1df323607999179e00a5a39197bf02ea (diff) | |
| download | samba-7d4ed899831a853ec2eef8dcd82d74fdbf568f0e.tar.gz samba-7d4ed899831a853ec2eef8dcd82d74fdbf568f0e.tar.bz2 samba-7d4ed899831a853ec2eef8dcd82d74fdbf568f0e.zip | |
s3-rpc: Decrypt with the proper session key in CreateTrustedDomainEx2.
On LSA and SAMR pipes session_key is truncated to 16 byte when doing encryption/decryption.
However, this was not done for trusted domain-related modifying operations.
As result, Samba 4 client libraries do not work against Samba 3 while working
against Windows 2008 r2.
Solved this by introducing "session_extract_session_key()" function that allows to specify
intent of use of the key.
Signed-off-by: Andreas Schneider <asn@samba.org>
Autobuild-User: Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date: Tue Mar 13 12:23:44 CET 2012 on sn-devel-104
Diffstat (limited to 'source3/include')
| -rw-r--r-- | source3/include/auth.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/source3/include/auth.h b/source3/include/auth.h index 7f2c3e5db7..693a0df383 100644 --- a/source3/include/auth.h +++ b/source3/include/auth.h @@ -128,6 +128,12 @@ struct auth_init_function_entry { extern const struct gensec_security_ops gensec_ntlmssp3_server_ops; +/* Intent of use for session key. LSA and SAMR pipes use 16 bytes of session key when doing create/modify calls */ +enum session_key_use_intent { + KEY_USE_FULL = 0, + KEY_USE_16BYTES +}; + /* Changed from 1 -> 2 to add the logon_parameters field. */ /* Changed from 2 -> 3 when we reworked many auth structures to use IDL or be in common with Samba4 */ #define AUTH_INTERFACE_VERSION 3 |