Age | Commit message (Collapse) | Author | Files | Lines |
|
password. On NT4, NT_STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT means
the password was correct. So the PDC believed that he had his trust
account correctly added. Later the auth2 naturally failed.
BTW, setting up an interdom trust account is not what I would call
well documented and easy to handle... Working on that now :-)
Volker
(This used to be commit e4e44cf3b18231ec5d7326fb42edec741caa147b)
|
|
useful in the auth verifier yet. So this patch ignores it.
Really checking this would be a lot more intrusive: in rpc_api_pipe we
would have to distinguish between binds and normal requests, or have
more state in the netsec info of cli_state, which is also somewhat
hackish.
Volker
(This used to be commit 8de04fcf680a9bc5054965577eb500e0541ffe66)
|
|
(This used to be commit d85ffb3e70189648cd2d0c8113dc3d8085ff80bc)
|
|
(This used to be commit 18b62570c4b0b84ebe665395f08ca7c23e4c126a)
|
|
(This used to be commit c0a1069463ea7239ca603deb5c568151439fea3f)
|
|
primaryGroupID (rid). This is consistant with the move from 'rid' to ntSid
for the primary user identifier.
Also cope with legacy installations where primaryGroupID might have been
stored as 0.
Andrew Bartlett
(This used to be commit 0e432817cb927b41af7b49fb0b5081ffdb46f85e)
|
|
entropy - use sys_random() instead.
Andrew Bartlett
(This used to be commit 640462a365235aa7ce6f817778f022530a25d909)
|
|
(This used to be commit e2eb7f128ef802bde742acfd13bc093a05d31200)
|
|
(This used to be commit 44dbed231743b5caea319c448b2700bb02cc8303)
|
|
Remove admonition in ServerType - Until someone gives me a replacement for it
I consider it a non-issue.
(This used to be commit 147676b44a4b393276497419f0bc80bff8fe425a)
|
|
(This used to be commit 71f6fb16ba9c75b96aea9b0b18f4b73b0d11a5ac)
|
|
(This used to be commit 32c8796f2a2b598daa17835394d143bd266aa7bf)
|
|
(This used to be commit 9dc8f7b4d46b3d1adf4b22cec2b62600dcb3c899)
|
|
(This used to be commit d817eaf0ecca2d878ab1ffcf7a747a02d71c811e)
|
|
(This used to be commit d31509fe88da8727521586dced1da2c73bfee2bc)
|
|
(This used to be commit 367a5cad1edf6a49783806d5a8b59a62d8856706)
|
|
that is now possible to, for example, load a module which contains
an auth method into a binary without the auth/ subsystem built in.
(This used to be commit 74d9ecfe2dd7364643d32acb62ade957bd71cd0d)
|
|
(This used to be commit 59d17982b7062e6a34e9382fb0056a913b28e23e)
|
|
(This used to be commit ab1ff35187924c31a8fa503c0d02c6b54605da4f)
|
|
on the security entries sent.
Jeremy.
(This used to be commit 748ae44d55f54291da3fe6ba2d60285d6da3d415)
|
|
on the security entries sent.
Jeremy.
(This used to be commit 45953d59f707b58e66b980512afc7f929d360ad5)
|
|
struct in the correct place.
Jeremy.
(This used to be commit 4cd8b276715f7e019fcee8fc3ebb2855610c4751)
|
|
struct in the correct place.
Jeremy.
(This used to be commit 98729bc9a60f77dbc107c42f4f7a60ed96e2102f)
|
|
Jeremy.
(This used to be commit ec36cb4f6f59dac2f459d831f960152603e12633)
|
|
Jeremy.
(This used to be commit 151b7d0d88e14dd17c28e522a3e1e8f64a4a2a87)
|
|
(This used to be commit 7bec28f23c5bef8516e798a0808585ed1a30517e)
|
|
(This used to be commit 94780f0947f7ad7d5bc83e61681148637b59d7ab)
|
|
(This used to be commit ee1374cabf38c3d99e66a45316e232d1c2cfbe6a)
|
|
(This used to be commit 6138093aa0ded3719f73ed3efbd7172131ca0fa3)
|
|
(This used to be commit b87be0dddfcace95527b9a05f8f81cd6d2e86d39)
|
|
(This used to be commit 0c1946e51c7cd18907eb65c93042758196fe74c9)
|
|
structure-memcpy for DATA_BLOB parameters to using a pointer to that DATA_BLOB.
auth_sam calls some of these functions, so I've cleaned it all up to use this
format now.
Also clean up some debug statements to make them easier to read.
Andrew Bartlett
(This used to be commit 0c355c274a6ac084e4bf15a15613dfc007d6c5fc)
|
|
With big thanks to tpot for the ethereal disector, and for the base code
behind this, we now fully support NTLMv2 as a client.
In particular, we support it with direct domain logons (tested with ntlm_auth
--diagnostics), with 'old style' session setups, and with NTLMSSP.
In fact, for NTLMSSP we recycle one of the parts of the server's reply directly...
(we might need to parse for unicode issues later).
In particular, a Win2k domain controller now supplies us with a session key
for this password, which means that doman joins, and non-spnego SMB signing
are now supported with NTLMv2!
Andrew Bartlett
(This used to be commit 9f6a26769d345d319ec167cd0e82a45e1207ed81)
|
|
users and groups.
(This used to be commit 27ca9bde6ba1a21326d89ab1dab52f7053fff9a4)
|
|
users and groups.
(This used to be commit dcc6d9e76c737400aaffdd4f261fd0f191aaeea8)
|
|
(This used to be commit 372a574a73b86855cf6efc18349e5ba24067d690)
|
|
LMv2 response less than 24 bytes is just silly.
Andrew Bartlett
(This used to be commit b4ecdb2e582376d2713f81e8e32a668014905d70)
|
|
same here.
Andrew Bartlett
(This used to be commit a4556786d28724309321a02afbf5005158440258)
|
|
one element longer than the domain sid.
Andrew Bartlett
(This used to be commit c61e5e38776d2de53d120b592a6685158e79ebb8)
|
|
(This used to be commit 045210e129e6e0aef8f847e7ed8714d0d9974e7f)
|
|
(This used to be commit 05d7850302d4369c4f8001c923217f8912261e7d)
|
|
(This used to be commit 5368f10eabbca09eee1e2777e8cb2fcb7f92fc1d)
|
|
(This used to be commit 6829762e3d71bd934b834dc2f09cc136758d04e0)
|
|
(This used to be commit 044489f218fa90df3a4838980b060738d6dcbffc)
|
|
(This used to be commit 7f76eac5a0f93107d990b0fde651838c38970092)
|
|
(This used to be commit 20756925486b407fbb2cf06d776ad2ce19b00c74)
|
|
- auth with ntlmv2 and lmv2 but deliberately break the ntlmv2 hash
- auth with ntlmv2 and lmv2 but deliberately break the lmv2 hash
- auth with ntlm and lm but deliberately break the ntlm hash
- auth with ntlm and lm but deliberately break the lm hash
My theory is that the NTLM or NTLMv2 field must be correct and if it is,
it doesn't matter what the value of the LM or LMv2 field is.
Fixed cosmetic test name display bug.
(This used to be commit 5dcde9451bd0d6a7462b77cf5ed137bfd691adaa)
|
|
Now the build farm will no doubt find more.
(This used to be commit e91e648c9b0841fbffbc8f39e71abade0996a1e7)
|
|
(This used to be commit cd1182ba75fbfa6b17964a3fefba2c2c0292cfb7)
|
|
(This used to be commit edc51dbc9ce319c612e2ff9434ca5a7521ba016f)
|