samba.git/auth/gensec, branch master

auth/gensec: add support for SEC_CHAN_DNS_DOMAIN to schannel_update()

2014-12-19T12:15:13+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/gensec: make sure we keep a DCERPC_AUTH_TYPE_SCHANNEL backend if required

2014-12-19T12:15:13+00:00

Even with CRED_MUST_USE_KERBEROS we should keep the DCERPC_AUTH_TYPE_SCHANNEL
backend arround, this can only be specified explicitely by the caller
and cli_credentials_get_netlogon_creds() != NULL is the strong indication
that the caller is using DCERPC_AUTH_TYPE_SCHANNEL *now*.

With trusts against AD domain we can reliable use kerberos and netlogon
secure channel for authentication.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth: gensec: asn1 fixes - check all returns.

2014-09-25T22:51:16+00:00

Signed-off-by: Jeremy Allison 
Reviewed-by: Ronnie Sahlberg

gensec: add DCERPC_AUTH_TYPE_NCALRPC_AS_SYSTEM backend

2014-04-24T09:21:05+00:00

Signed-off-by: Andreas Schneider 
Signed-off-by: Stefan Metzmacher

auth/gensec: use auth_ctx->generate_session_info() for schannel

2014-04-24T09:21:05+00:00

This way we generate a correct session info for the s3 rpc_server,
including a unix token.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

auth: Pass though error from GENSEC sub-mechanism

2014-04-02T15:12:45+00:00

This allows wrong-password or account-locked-out errors to be passed
though from Kerberos (gssapi).

Andrew Bartlett

Change-Id: I4bc11a1ad98dfbcc5a4ad9101cd843a7a59f0b59
Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

auth/gensec/spnego: map SPNEGO_REJECT to NT_STATUS_LOGON_FAILURE

2014-03-27T01:34:36+00:00

This is what NTLMSSP also gives.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Thu Mar 27 02:34:36 CET 2014 on sn-devel-104

auth/gensec: remove tevent_context argument from gensec_update()

2014-03-26T23:36:32+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/gensec: make use of gensec_update_ev() in spnego.c

2014-03-26T23:36:31+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/gensec: add a gensec_update_ev() function

2014-03-26T23:36:31+00:00

This is the current gensec_update() which takes an optional
tevent_context structure and allows semi-async code.

This is just a temporary solution on the way to kill
the semi-async code completely, by using gensec_update_send/recv.

By providing a gensec_update_ev(), we can remove the explicit
tevent_context from gensec_update() and fix all the sane callers.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett