summaryrefslogtreecommitdiffstats
path: root/libcli/auth
Commit message (Collapse)AuthorAgeFilesLines
...
* s4-waf: install the rest of the headersAndrew Tridgell2010-04-061-5/+1
|
* build: commit all the waf build files in the treeAndrew Tridgell2010-04-061-0/+27
|
* libcli/auth/schannel_state_tdb.c - fix a memory leakMatthias Dieter Wallnöfer2010-03-161-0/+1
|
* libcli/auth/schannel_state_tdb.c - fix an obviously wrong error handlingMatthias Dieter Wallnöfer2010-03-091-1/+0
|
* libcli/auth: add a const to des_crypt112_16()Stefan Metzmacher2010-03-052-2/+2
| | | | metze
* Fix typo in comments.Karolin Seeger2010-03-031-1/+1
|
* libcli/auth: print the error in the debug messageStefan Metzmacher2010-02-261-1/+2
| | | | metze
* s4:cleanup remove unused schannel ldb codeSimo Sorce2010-02-232-339/+0
|
* s4:schannel merge code with s3Simo Sorce2010-02-231-2/+2
| | | | | | | | | | | | | | | | | After looking at the s4 side of the (s)channel :) I found out that it makes more sense to simply make it use the tdb based code than redo the same changes done to s3 to simplify the interface. Ldb is slow, to the point it needs haks to pre-open the db to speed it up, yet that does not solve the lookup speed, with ldb it is always going to be slower. Looking through the history it is evident that the schannel database doesn't really need greate expanadability. And lookups are always done with a single Key. This seem a perfet fit for tdb while ldb looks unnecessarily complicated. The schannel database is not really a persistent one. It can be discared during an upgrade without causing any real issue. all it contains is temproary session data.
* schannel_tdb: make code compilable in both treesSimo Sorce2010-02-232-51/+98
|
* s3:schannel streamline interfaceSimo Sorce2010-02-232-42/+181
| | | | | Make calling schannel much easier by removing the need to explicitly open the database. Let the abstraction do it instead.
* s3:schannel fix memory hierarchySimo Sorce2010-02-231-1/+1
| | | | | | | passing mem_ctx was causing creds->sid to be allocated on mem_ctx and not be child of creds as expected. When later in schannel_check_creds_state() we stole the creds on a different memory context the sid was left behind and the memory it points to freed when the temporary context was freed.
* schannel: merge header filesSimo Sorce2010-02-232-48/+34
| | | | | One almost empty header file was simply including another not included by anything else. Just merge them together.
* s4:schannel more readable check logicSimo Sorce2010-02-232-12/+0
| | | | | | | | Make the initial schannel check logic more understandable. Make it easy to define different policies depending on the caller's security requirements (Integrity/Privacy/Both/None) This is the same change applied to s3
* s3:schannel more readable check logicSimo Sorce2010-02-232-17/+0
| | | | | | Make the initial schannel check logic more understandable. Make it easy to define different policies depending on ther caller's security requirements (Integrity/Privacy/Both/None)
* Change uint_t to unsigned int in libcliMatt Kraai2010-02-023-3/+3
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Simplify E_md5hash a bitVolker Lendecke2010-01-071-6/+2
|
* libcli/auth Make gd's NDR NTLMSSP parsers helpers commonAndrew Bartlett2009-12-222-0/+189
| | | | (but not built in Samba4 for now)
* libcli/auth: initialize creds in netlogon_creds_client_init_session_key()Stefan Metzmacher2009-10-241-2/+3
| | | | metze
* libcli/auth: fix memory leak in schannel_creds_server_step_check_ldb()Stefan Metzmacher2009-10-241-24/+37
| | | | metze
* libcli/auth: don't leak the ldb_msg in schannel_store_session_key_ldb()Stefan Metzmacher2009-10-241-1/+1
| | | | metze
* s3/s4 common: fix up header fileMatthias Dieter Wallnöfer2009-10-041-2/+1
|
* spnego: Support ASN.1 BIT STRING and use it in SPNEGO.Kouhei Sutou2009-09-172-8/+9
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* spnego: add spnego_proto.h.Günther Deschner2009-09-172-1/+29
| | | | Guenther
* spnego: share spnego_parse.Günther Deschner2009-09-172-0/+477
| | | | Guenther
* libcli/auth: remove trailing whitespace.Günther Deschner2009-09-161-72/+72
| | | | Guenther
* libcli/auth: rewrite schannel sign/seal code to be more genericStefan Metzmacher2009-09-162-162/+156
| | | | | | This prepares support for HMAC-SHA256/AES. metze
* schannel: remove last traces of gensec.Günther Deschner2009-09-161-2/+0
| | | | Guenther
* schannel: fully share schannel sign/seal between s3 and 4.Günther Deschner2009-09-161-0/+1
| | | | Guenther
* schannel: move schannel_sign to main directory.Günther Deschner2009-09-163-0/+351
| | | | Guenther
* s4: fix the build after ntlmssp header change.Günther Deschner2009-08-281-0/+1
| | | | Guenther
* libcli/auth: remove unused NTLMSSP_NAME_TYPE_ flags.Günther Deschner2009-08-282-8/+3
| | | | Guenther
* libcli/auth: add netlogon_creds_step_crypt() and netlogon_creds_first_step()Stefan Metzmacher2009-08-271-10/+21
| | | | | | | | | This abstracts the usage of crypto functions instead of directly calling des_crypt112(). metze Signed-off-by: Günther Deschner <gd@samba.org>
* libcli/auth: remove some useless linesStefan Metzmacher2009-08-271-3/+0
| | | | | | metze Signed-off-by: Günther Deschner <gd@samba.org>
* libcli/auth: remember schannel type in netlogon_creds_server_init()Stefan Metzmacher2009-08-271-0/+1
| | | | | | metze Signed-off-by: Günther Deschner <gd@samba.org>
* libcli/auth: add tdb backend for schannel state.Günther Deschner2009-08-273-0/+239
| | | | Guenther
* libcli/auth: move netlogon_creds_CredentialState out of libcli.Günther Deschner2009-08-272-13/+1
| | | | Guenther
* s4-schannel: add ldb suffix to schannel functions.Günther Deschner2009-08-272-33/+33
| | | | Guenther
* libcli/auth: rename schannel_state.c to schannel_state_ldb.c.Günther Deschner2009-08-272-14/+14
| | | | Guenther
* s4: Call va_end() after all va_start()/va_copy() calls.Andrew Kroeger2009-06-181-0/+4
| | | | | | | | This corrects the issues reaised in bug #6129, and some others that were not originally identified. It also accounts for some code that was in the original bug report but appears to have since been made common between S3 and S4. Thanks to Erik Hovland <erik@hovland.org> for the original bug report.
* Add const to cast, to fix warningAndrew Bartlett2009-06-181-2/+2
|
* Fix a couple of warningsVolker Lendecke2009-04-233-15/+20
|
* Stop autogenerated files from being created.Jeremy Allison2009-04-201-5/+0
| | | | Jeremy.
* Add previously generated header files now needed in merged build.Jeremy Allison2009-04-203-0/+270
| | | | Jeremy.
* libcli/auth Ensure we cancel the transaction when schannel not detectedAndrew Bartlett2009-04-201-0/+1
| | | | | | (found by jra on code review) Andrew Bartlett
* libcli/auth: Don't pass back lm_sess_key as the same pointer as user_sess_keyAndrew Bartlett2009-04-201-13/+7
| | | | | | | This ensures that a talloc_free() of both pointers won't double-free (sharing pointers like this is evil anyway). Andrew Bartlett
* Fix building the now common msrpc_parse codeAndrew Bartlett2009-04-161-1/+1
|
* Add missing header, remove generated headerAndrew Bartlett2009-04-151-0/+24
| | | | (This isn't a rename, honest :-)
* libcli/auth Push schannel check into common libcli/authAndrew Bartlett2009-04-141-4/+9
| | | | | | | This means we have a single choke point to ensure the remote client is using schannel. Andrew Bartlett
* Rework Samba4 to use the new common libcli/auth codeAndrew Bartlett2009-04-142-3/+7
| | | | | | | In particular, this is the rename from creds_ to netlogon_creds_, as well as other links to use the new common crypto. Andrew Bartlett