summaryrefslogtreecommitdiff
path: root/source4/auth/ntlmssp
AgeCommit message (Collapse)AuthorFilesLines
2010-03-24s4:ntlmssp: replace server_role by a server.is_standalone in ↵Stefan Metzmacher2-4/+10
(gensec_)ntlmssp_state Inspired by the NTLMSSP merge work by Andrew Bartlett. metze Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24s4:ntlmssp: remove more whitespaces...Stefan Metzmacher1-32/+32
metze Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24s4:ntlmssp: add NTLMSSP_FEATURE_* flags from s3Stefan Metzmacher1-0/+6
metze Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24s4:ntlmssp: keep struct gensec_ntlmssp_context in gensec_security->private_dataStefan Metzmacher4-23/+62
Inspired by the NTLMSSP merge work by Andrew Bartlett. metze Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24s4:ntlmssp: remove gensec_security from (gensec_)ntlmssp_stateStefan Metzmacher3-5/+5
Inspired by the NTLMSSP merge work by Andrew Bartlett. metze Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24s4:ntlmssp: remove backend specifix stuff from (gensec_)ntlmssp_stateStefan Metzmacher2-22/+46
Inspired by the NTLMSSP merge work by Andrew Bartlett. metze Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24s4:ntlmssp: create a gensec_ntlmssp_context between gensec_security and ↵Stefan Metzmacher2-9/+20
ntlmssp_state Inspired by the NTLMSSP merge work by Andrew Bartlett. metze Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24s4:ntlmssp: add definition of gensec_ntlmssp_contextStefan Metzmacher1-0/+7
Inspired by the NTLMSSP merge work by Andrew Bartlett. metze Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24s4:ntlmssp: add a callback_private pointer to gensec_ntlmssp_stateStefan Metzmacher1-1/+6
We'll remove any gensec specific stuff from gensec_ntlmssp_state and rename it to ntlmssp_state again. Inspired by the NTLMSSP merge work by Andrew Bartlett. metze Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24s4:ntlmssp Ensure that we always negotiate signing if we negotiate sealing.Andrew Bartlett1-0/+1
Without this, a sealed LDAP connection to windows does not work. Andrew Bartlett
2010-03-03Fix typo in comments.Karolin Seeger1-2/+2
2009-12-29s4:ntlmssp: remove mem_ctx from check_password() callback to match s3Stefan Metzmacher2-5/+2
metze
2009-12-29s4:ntlmssp_server: always call ntlmssp_server_postauth() and decide there if ↵Stefan Metzmacher1-5/+11
it's a noop metze
2009-12-29s4:ntlmssp_server: don't use a mem_ctx for ntlmssp_server_auth()Stefan Metzmacher1-13/+7
metze
2009-12-29s4:ntlmssp_server: don't use mem_ctx in auth_ntlmssp_check_password()Stefan Metzmacher1-16/+8
metze
2009-12-29s4:ntlmssp_server: clear session key in ntlmssp_server_preauth()Stefan Metzmacher1-3/+1
metze
2009-12-29s4:ntlmssp: use data_blob_null in ntlmssp_server_auth()Stefan Metzmacher1-4/+6
metze
2009-12-29s4:ntlmssp_server: remove unused variableStefan Metzmacher1-7/+0
metze
2009-12-29s4:auth/ntlmssp: let get_challenge() return a NTSTATUS and fill a stack bufferStefan Metzmacher2-13/+13
metze
2009-12-29s4:ntlmssp: fix whitespaces in ntlmssp.hStefan Metzmacher1-16/+16
metze
2009-12-22s4:gensec Don't give a warning when Windows client connects with NTLMAndrew Bartlett1-11/+20
We have had the workaround for a long time, but at the time the log warnings remained. Andrew Bartlett
2009-12-22s4:auth Change 'get_challenge' API to be more like Samba3Andrew Bartlett1-2/+5
It is just easier to fill in the known to be 8 byte challenge than stuff about with allocated pointers. Andrew Bartlett
2009-12-16s4-gensec: Replace gensec_get_peer_addr with new tsocket based fn.Andreas Schneider1-1/+2
2009-10-20s4: ran minimal_includes.pl on source4/auth/ntlmsspAndrew Tridgell4-8/+0
2009-10-15s4:ntlmssp server - use also here the new "lp_dnsdomain()" callMatthias Dieter Wallnöfer1-2/+1
2009-08-28s4: include ntlmssp header in auth/ntlmssp/ntlmssp.h.Günther Deschner1-0/+1
Guenther
2009-08-28s4-ntlmssp: use interface constants in TargetInfo blob.Günther Deschner1-5/+5
Guenther
2009-08-28s4-ntlmssp: use NTLMSSP headers from IDL and remove duplicate constants.Günther Deschner5-50/+21
Guenther
2009-07-08s4:auth/ntlmssp: let _unwrap fallback to seal if sign only doesn't workStefan Metzmacher1-6/+57
s4:auth/ntlmssp: let _unwrap fallback to seal if sign only doesn't work Windows always uses SEAL with NTLMSSP on LDAP connection even if not negotiated. metze
2009-07-07s4:auth It is easier to copy the session key than get talloc right.Andrew Bartlett1-4/+3
The session keys as supplied already have a reference on them, so stealing them creates challenges. For 16 bytes, it is just easier to be consistant and copy them. Andrew Bartlett
2009-07-01fixed the use of talloc_steal in ntlmssp_server Andrew Tridgell1-3/+2
The previous use of talloc_steal could cause a steal of a pointer that had references. This ensures that doesn't happen
2009-04-19Remove unused headersAndrew Bartlett3-5/+0
2009-04-16Fix Samba4 build errors with common libcli/samsyncAndrew Bartlett4-6/+4
2009-04-14Rework Samba4 to use the new common libcli/auth codeAndrew Bartlett1-5/+0
In particular, this is the rename from creds_ to netlogon_creds_, as well as other links to use the new common crypto. Andrew Bartlett
2009-04-14Move MSRPC-PARSE into the common libcli/authAndrew Bartlett2-374/+0
This is a depenceny of smbencrypt.c
2009-03-01Use common header file for character set handling in Samba 3 and Samba 4.Jelmer Vernooij1-16/+20
2009-02-13Remove auth/ntlm as a dependency of GENSEC by means of function pointers.Andrew Bartlett3-14/+11
When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2009-01-31s4:auth: try to fix the build on SolarisStefan Metzmacher1-0/+1
MAXHOSTNAMELEN comes in via system/network.h now. metze
2008-11-02Add gensec_settings structure. This wraps loadparm_context for now, butJelmer Vernooij2-28/+28
should in the future only contain some settings required for gensec.
2008-11-01Remove unused argument iconv_convenience.Jelmer Vernooij4-8/+1
2008-10-24Remove unused include param/param.h.Jelmer Vernooij2-2/+0
2008-10-24Remove iconv_convenience parameter from simple string push/pullJelmer Vernooij4-13/+6
functions.
2008-10-20Make sure prototypes are always included, make some functions static andJelmer Vernooij1-1/+1
remove some unused functions.
2008-09-24Move source4/lib/crypto to lib/crypto.Jelmer Vernooij3-3/+3
2008-09-23ntlmssp: only give away the session key, when the authentication is doneStefan Metzmacher1-0/+4
metze
2008-09-19NTLMSSP Server: Correctly fills in the DNS server name and server domainMatthias Dieter Wallnöfer1-21/+17
Don't rely on "get*" system calls but rather on SAMBA "lp_*" calls. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-08-01auth/ntlmssp: don't crash when the backend give no challengeStefan Metzmacher1-0/+6
metze (This used to be commit c01fee80a79cd9e0f7bb295333bb03bd37328d05)
2008-07-15Try to make NTLMSSP less fussy for unimportant messages.Andrew Bartlett1-2/+13
We don't really care (because nobody uses them) what we send as the domain and workstation in the negotiate packet. Andrew Bartlett (This used to be commit 9ac07e14873df2c18d0e9501691c2d4c4047e218)
2008-06-27ntlmssp: get rid of "cast to pointer from integer of different size" warning ↵Michael Adam1-3/+3
on 64 bit Not sure if this check is actually necessary, though: the second should be sufficient. Michael (This used to be commit 2813882ef3cc3609a74ad83bcee6be0c2cd53494)
2008-05-20Fix proto generation.Jelmer Vernooij1-1/+1
(This used to be commit 7385d9641d49b94c83fd2c75e57c9623d21fcdb0)