samba.git/libcli/auth/wscript_build, branch master

libcli/auth: add netlogon_creds_cli* infrastructure

2014-01-07T11:47:03+00:00

This provides an abstraction to hide netlogon_creds_CredentialState,
which is stored in a node local tdb.

Where the global state (netlogon_creds_CredentialState) between client and
server was only kept in memory (on the client side), we now use
the abstracted netlogon_creds_cli_context.

We now use a node specific computer name in order to establish
individual netlogon sessions per node.

If the caller wants to use some netlogon calls with credential chain
(struct netr_Authenticator), netlogon_creds_cli_lock*() is used
to get the current netlogon_creds_CredentialState in a g_lock'ed
fashion, a talloc_free() will release the lock.

The locking is needed as there might be more than one process
(multiple winbindd child, cmdline tools) which want to talk
to a specific domain controller. The usage of netlogon_creds_CredentialState
needs to be serialized as it uses sequence numbers.

LogonSamLogonEx doesn't use the credential chain, but for some operations
it needs the global session in order to de/encrypt individual fields.
It uses the lockless netlogon_creds_cli_get() and netlogon_creds_cli_validate()
functions, which just make sure the session hasn't changed between
get and validate.

This is prepares the proper fix for a large number of bugs:
https://bugzilla.samba.org/show_bug.cgi?id=6563
https://bugzilla.samba.org/show_bug.cgi?id=7944
https://bugzilla.samba.org/show_bug.cgi?id=7945
https://bugzilla.samba.org/show_bug.cgi?id=7568
https://bugzilla.samba.org/show_bug.cgi?id=8599

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/gensec: move libcli/auth/schannel_sign.c into schannel.c

2014-01-06T23:27:11+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

libcli/auth: convert to dbwrap.

2013-04-12T21:59:31+00:00

Signed-off-by: Rusty Russell 
Reviewed-by: Jeremy Allison

UTIL_TDB: lowercase name.

2012-05-03T18:18:22+00:00

Autobuild-User: Jelmer Vernooij 
Autobuild-Date: Thu May  3 20:18:22 CEST 2012 on sn-devel-104

Make krb5 wrapper library common so they can be used all over

2012-04-23T23:20:38+00:00

auth: Move the rest of the source4 gensec_ntlmssp code to the top level

2012-02-17T09:48:09+00:00

The ntlmssp_server code will be in common shortly, and aside from a
symbol name or two, moving the client code causes no harm and makes
less mess.  We will also get the client code in common very soon.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher

s4-lsarpc handle more info levels in SetInfoTrustedDomain calls

2011-12-12T11:57:07+00:00

This uses the very helpful conversion functions written for the s3 lsa server
and places these in common.

Andrew Bartlett

ntlmssp: Move ntlmssp code to auth/ntlmssp

2011-10-18T02:13:31+00:00

This brings in the code from both libcli/auth and
source4/auth/ntlmssp.

Andrew Bartlett

Signed-off-by: Stefan Metzmacher

libcli/auth: Provide a struct loadparm_context to schannel calls

2011-10-13T12:06:07+00:00

This will allow us to pass this down to the tdb_wrap layer.

Andrew Bartlett

libcli/util Bring samba4 unix -> nt_status code in common.

2011-06-20T04:36:06+00:00

Due to library link orders, this is already the function that is being
used.  However we still need to sort out the duplicate symbol issues,
probably by renaming things.

Andrew Bartlett