summaryrefslogtreecommitdiff
path: root/libcli/auth
AgeCommit message (Collapse)AuthorFilesLines
2010-06-25schannel Change to TDB_CLEAR_IF_FIRST to reduce fsync()Andrew Bartlett1-32/+1
By making this DB TDB_NOSYNC, and by making that safe with TDB_CLEAR_IF_FIRST, we greatly reduce the fsync() load on the server. This particularly helps the source4/ 'make test', which otherwise tries to disable fsync() in ldb. Andrew Bartlett Signed-off-by: Jeremy Allison <jra@samba.org>
2010-06-25libcli/auth make open_schannel_session_store() publicAndrew Bartlett2-7/+7
This will allow TDB_CLEAR_IF_FIRST to be used Signed-off-by: Jeremy Allison <jra@samba.org>
2010-06-01s4:ntlmssp Use common code for ntlmssp_sign.cAndrew Bartlett2-18/+19
The common code does not have a mem_ctx on ntlmssp_check_packet() and ntlmssp_unseal_packet(). We do however need some internal working of the code exposed, so some structures are moved to ntlmssp_sign.h Andrew Bartlett
2010-05-31s3:ntlmssp Move ntlmssp_sign.c from source3 to common code.Andrew Bartlett4-0/+696
This needs a small re-arrangement of the supporting code. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Günther Deschner <gd@samba.org>
2010-05-31ntlmssp: Make the ntlmssp.h from source3/ a common headerAndrew Bartlett1-0/+139
The code is not yet in common, but I hope to fix that soon. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Günther Deschner <gd@samba.org>
2010-05-20Fix what looks like a cut-and-paste error in our read_negTokenInit() function.Jeremy Allison1-4/+4
We should never be calling asn1_push_XXX functions inside an asn1 reading function. Change asn1_push_tag() -> asn1_start_tag() and asn1_pop_tag() -> asn1_end_tag(). This allows us to connect to a NetApp filer at the Microsoft plugfest. Andrew PLEASE CHECK ! Jeremy.
2010-05-19Thanks to Andrew Bartlett's advice, fix the NTLMSSP version problem the ↵Jeremy Allison1-1/+4
correct way. No more magic blobs :-). Use ndr_push_struct_blob() to push a properly formatted VERSION struct. Jeremy.
2010-05-18s3: Remove use of iconv_convenience.Jelmer Vernooij1-8/+2
2010-05-18Finish removal of iconv_convenience in public API's.Jelmer Vernooij4-34/+14
2010-04-11libcli/auth: Fix an uninitialized variableVolker Lendecke1-2/+1
value.dptr was used uninitialized in the "goto done;"
2010-04-06s4-waf: more dependencies on tallocAndrew Tridgell1-1/+2
these are needed so we can support a system talloc without using the bundled talloc.h
2010-04-06s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell1-0/+2
them
2010-04-06s4-waf: install the rest of the headersAndrew Tridgell1-5/+1
2010-04-06build: commit all the waf build files in the treeAndrew Tridgell1-0/+27
2010-03-16libcli/auth/schannel_state_tdb.c - fix a memory leakMatthias Dieter Wallnöfer1-0/+1
2010-03-09libcli/auth/schannel_state_tdb.c - fix an obviously wrong error handlingMatthias Dieter Wallnöfer1-1/+0
2010-03-05libcli/auth: add a const to des_crypt112_16()Stefan Metzmacher2-2/+2
metze
2010-03-03Fix typo in comments.Karolin Seeger1-1/+1
2010-02-26libcli/auth: print the error in the debug messageStefan Metzmacher1-1/+2
metze
2010-02-23s4:cleanup remove unused schannel ldb codeSimo Sorce2-339/+0
2010-02-23s4:schannel merge code with s3Simo Sorce1-2/+2
After looking at the s4 side of the (s)channel :) I found out that it makes more sense to simply make it use the tdb based code than redo the same changes done to s3 to simplify the interface. Ldb is slow, to the point it needs haks to pre-open the db to speed it up, yet that does not solve the lookup speed, with ldb it is always going to be slower. Looking through the history it is evident that the schannel database doesn't really need greate expanadability. And lookups are always done with a single Key. This seem a perfet fit for tdb while ldb looks unnecessarily complicated. The schannel database is not really a persistent one. It can be discared during an upgrade without causing any real issue. all it contains is temproary session data.
2010-02-23schannel_tdb: make code compilable in both treesSimo Sorce2-51/+98
2010-02-23s3:schannel streamline interfaceSimo Sorce2-42/+181
Make calling schannel much easier by removing the need to explicitly open the database. Let the abstraction do it instead.
2010-02-23s3:schannel fix memory hierarchySimo Sorce1-1/+1
passing mem_ctx was causing creds->sid to be allocated on mem_ctx and not be child of creds as expected. When later in schannel_check_creds_state() we stole the creds on a different memory context the sid was left behind and the memory it points to freed when the temporary context was freed.
2010-02-23schannel: merge header filesSimo Sorce2-48/+34
One almost empty header file was simply including another not included by anything else. Just merge them together.
2010-02-23s4:schannel more readable check logicSimo Sorce2-12/+0
Make the initial schannel check logic more understandable. Make it easy to define different policies depending on the caller's security requirements (Integrity/Privacy/Both/None) This is the same change applied to s3
2010-02-23s3:schannel more readable check logicSimo Sorce2-17/+0
Make the initial schannel check logic more understandable. Make it easy to define different policies depending on ther caller's security requirements (Integrity/Privacy/Both/None)
2010-02-02Change uint_t to unsigned int in libcliMatt Kraai3-3/+3
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-07Simplify E_md5hash a bitVolker Lendecke1-6/+2
2009-12-22libcli/auth Make gd's NDR NTLMSSP parsers helpers commonAndrew Bartlett2-0/+189
(but not built in Samba4 for now)
2009-10-24libcli/auth: initialize creds in netlogon_creds_client_init_session_key()Stefan Metzmacher1-2/+3
metze
2009-10-24libcli/auth: fix memory leak in schannel_creds_server_step_check_ldb()Stefan Metzmacher1-24/+37
metze
2009-10-24libcli/auth: don't leak the ldb_msg in schannel_store_session_key_ldb()Stefan Metzmacher1-1/+1
metze
2009-10-04s3/s4 common: fix up header fileMatthias Dieter Wallnöfer1-2/+1
2009-09-17spnego: Support ASN.1 BIT STRING and use it in SPNEGO.Kouhei Sutou2-8/+9
Signed-off-by: Günther Deschner <gd@samba.org>
2009-09-17spnego: add spnego_proto.h.Günther Deschner2-1/+29
Guenther
2009-09-17spnego: share spnego_parse.Günther Deschner2-0/+477
Guenther
2009-09-16libcli/auth: remove trailing whitespace.Günther Deschner1-72/+72
Guenther
2009-09-16libcli/auth: rewrite schannel sign/seal code to be more genericStefan Metzmacher2-162/+156
This prepares support for HMAC-SHA256/AES. metze
2009-09-16schannel: remove last traces of gensec.Günther Deschner1-2/+0
Guenther
2009-09-16schannel: fully share schannel sign/seal between s3 and 4.Günther Deschner1-0/+1
Guenther
2009-09-16schannel: move schannel_sign to main directory.Günther Deschner3-0/+351
Guenther
2009-08-28s4: fix the build after ntlmssp header change.Günther Deschner1-0/+1
Guenther
2009-08-28libcli/auth: remove unused NTLMSSP_NAME_TYPE_ flags.Günther Deschner2-8/+3
Guenther
2009-08-27libcli/auth: add netlogon_creds_step_crypt() and netlogon_creds_first_step()Stefan Metzmacher1-10/+21
This abstracts the usage of crypto functions instead of directly calling des_crypt112(). metze Signed-off-by: Günther Deschner <gd@samba.org>
2009-08-27libcli/auth: remove some useless linesStefan Metzmacher1-3/+0
metze Signed-off-by: Günther Deschner <gd@samba.org>
2009-08-27libcli/auth: remember schannel type in netlogon_creds_server_init()Stefan Metzmacher1-0/+1
metze Signed-off-by: Günther Deschner <gd@samba.org>
2009-08-27libcli/auth: add tdb backend for schannel state.Günther Deschner3-0/+239
Guenther
2009-08-27libcli/auth: move netlogon_creds_CredentialState out of libcli.Günther Deschner2-13/+1
Guenther
2009-08-27s4-schannel: add ldb suffix to schannel functions.Günther Deschner2-33/+33
Guenther
generated by cgit (git 2.34.1) at 2024-12-23 11:40:20 +0000