diff options
| author | Andrew Tridgell <tridge@samba.org> | 2004-04-28 13:17:28 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 12:51:37 -0500 |
| commit | 3fe884c26c772fca65470c45540d37a58deda403 (patch) | |
| tree | fc0689041a9f9a2ab0c97d37667fbdb7231c5c9c /source4/librpc/rpc/dcerpc_ntlm.c | |
| parent | 932b0ff5f5f5ce861a45df4a986b0db73a52e510 (diff) | |
| download | samba-3fe884c26c772fca65470c45540d37a58deda403.tar.gz samba-3fe884c26c772fca65470c45540d37a58deda403.tar.bz2 samba-3fe884c26c772fca65470c45540d37a58deda403.zip | |
r390: added my best guess for how session keys are supposed to work when you
use NTLMSSP sign or seal at the RPC layer
It doesn't work yet, but then again neither does the old code (which
just assumed the SMB session key was used, which of course makes no
sense on a ncacn_ip_tcp connection)
(This used to be commit e8782329269bc78d36d8ca83fb7a4e38b9c6b167)
Diffstat (limited to 'source4/librpc/rpc/dcerpc_ntlm.c')
| -rw-r--r-- | source4/librpc/rpc/dcerpc_ntlm.c | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/source4/librpc/rpc/dcerpc_ntlm.c b/source4/librpc/rpc/dcerpc_ntlm.c index 81f434cccf..194b1aa865 100644 --- a/source4/librpc/rpc/dcerpc_ntlm.c +++ b/source4/librpc/rpc/dcerpc_ntlm.c @@ -56,6 +56,17 @@ static NTSTATUS ntlm_sign_packet(struct dcerpc_security *dcerpc_security, return ntlmssp_sign_packet(ntlmssp_state, data, length, sig); } +static NTSTATUS ntlm_session_key(struct dcerpc_security *dcerpc_security, + uint8 session_key[16]) +{ + struct ntlmssp_state *ntlmssp_state = dcerpc_security->private; + if (!ntlmssp_state || ntlmssp_state->session_key.length < 16) { + return NT_STATUS_UNSUCCESSFUL; + } + memcpy(session_key, ntlmssp_state->session_key.data, 16); + return NT_STATUS_OK; +} + static void ntlm_security_end(struct dcerpc_security *dcerpc_security) { struct ntlmssp_state *ntlmssp_state = dcerpc_security->private; @@ -173,6 +184,7 @@ NTSTATUS dcerpc_bind_auth_ntlm(struct dcerpc_pipe *p, p->security_state->check_packet = ntlm_check_packet; p->security_state->seal_packet = ntlm_seal_packet; p->security_state->sign_packet = ntlm_sign_packet; + p->security_state->session_key = ntlm_session_key; p->security_state->security_end = ntlm_security_end; switch (p->auth_info->auth_level) { |