summaryrefslogtreecommitdiffstats
path: root/source3/smbd/seal.c
Commit message (Collapse)AuthorAgeFilesLines
* libcli/smb: move smb_seal.c to the toplevelStefan Metzmacher2011-10-211-1/+1
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 21 10:22:39 CEST 2011 on sn-devel-104
* s3-seal Remove struct smb_srv_trans_enc_ctxAndrew Bartlett2011-10-211-99/+50
| | | | | | | | | | | | | This structure added no value, particularly after the move to gensec. It was added at a time when auth_ntlmssp_state was not available in the client. This changed a while back (the wrapper was extended with client calls), and the move to gensec again reinforced that we do not need the extra complexity. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove references to auth_ntlmssp_context from the smb sealing codeAndrew Bartlett2011-10-211-15/+24
| | | | | | Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_want_feature()Andrew Bartlett2011-10-211-1/+1
| | | | | | | | We now just call the gensec_want_feature() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_negotiated_sign() and ↵Andrew Bartlett2011-10-211-2/+2
| | | | | | | | | | auth_ntlmssp_negotiated_seal() We now just call the gensec_have_feature() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_update wrapperAndrew Bartlett2011-10-211-7/+8
| | | | | | | | We now just call gensec_update directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3:smbd/seal: pass talloc_tos() auth_ntlmssp_update(), because we free a few ↵Stefan Metzmacher2011-10-211-1/+1
| | | | | | lines later metze
* ntlmssp: Move ntlmssp code to auth/ntlmsspAndrew Bartlett2011-10-181-1/+1
| | | | | | | | | This brings in the code from both libcli/auth and source4/auth/ntlmssp. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3: Pass smbd_server_connection to (unused) server_encryption_shutdownVolker Lendecke2011-08-251-1/+1
|
* s3: Pass smbd_server_connection to srv_encrypt_bufferVolker Lendecke2011-08-251-1/+2
|
* s3: Pass smbd_server_connection to srv_decrypt_bufferVolker Lendecke2011-08-251-1/+1
|
* s3: Pass smbd_server_connection to srv_free_enc_bufferVolker Lendecke2011-08-251-1/+1
|
* s3: Pass smbd_server_connection to is_encrypted_packetVolker Lendecke2011-08-251-1/+2
|
* s3: Explicitly pass smb_srv_trans_enc_ctx to srv_enc_ctxVolker Lendecke2011-08-251-3/+3
|
* s3: Make srv_enc_ctx staticVolker Lendecke2011-08-051-1/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Aug 5 18:29:24 CEST 2011 on sn-devel-104
* s3: Fix some nonempty blank linesVolker Lendecke2011-08-051-3/+3
|
* s3-ntlmssp Split auth_ntlmssp_start into two functionsAndrew Bartlett2011-08-031-1/+7
| | | | | | | | | This helps map on to the GENSEC semantics better, and ensures that the full set of desired features are set before the mechanism starts. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Remove calls to auth_ntlmssp_and_flags from the serverAndrew Bartlett2011-08-031-0/+2
| | | | | | | | | | | | This is changed so that the callers ask for the additional flags that they need, starting with no additional flags. This helps to create a proper abstraction layer in ntlmssp_wrap/auth_ntlmssp. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Add mem_ctx argument to auth_ntlmssp_updateAndrew Bartlett2011-08-031-3/+7
| | | | | | | | This clarifies the lifetime of the returned token. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Use auth_ntlmssp_*() functions in more placesAndrew Bartlett2011-08-031-2/+2
| | | | | | | | This allows auth_ntlmssp_get_ntlmssp_state() to be removed. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-auth: Added remote_address to ntlmssp server.Andreas Schneider2011-07-041-11/+39
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3-param Remove special case for global_myname(), rename to lp_netbios_name()Andrew Bartlett2011-06-091-1/+1
| | | | | | | | There is no reason this can't be a normal constant string in the loadparm system, now that we have lp_set_cmdline() to handle overrides correctly. Andrew Bartlett
* s3-libsmb: move protos to libsmb/proto.hGünther Deschner2011-05-061-0/+1
| | | | Guenther
* Fix many const compiler warnings.Jeremy Allison2011-05-051-1/+1
|
* s3-auth: smbd needs auth.hGünther Deschner2011-03-301-0/+1
| | | | Guenther
* s3: include smbd/smbd.h where needed.Günther Deschner2011-03-301-0/+1
| | | | Guenther
* s3-build: only include asn1 headers where actually needed.Günther Deschner2011-03-161-0/+1
| | | | Guenther
* s3-libsmb: move smb encryption structs into own header.Günther Deschner2011-03-161-0/+1
| | | | Guenther
* s3: Fix input check in is_encrypted_packetVolker Lendecke2010-10-081-1/+3
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Oct 8 07:40:52 UTC 2010 on sn-devel-104
* Add approriate TALLOC_CTX's thoughout the spnego code. No more implicit NULL ↵Jeremy Allison2010-07-201-4/+4
| | | | | | contexts. Jeremy.
* Add TALLOC_CTX argument to spnego_parse_negTokenInit, reduceJeremy Allison2010-07-201-2/+2
| | | | | | use of malloc, and data_blob(). Jeremy.
* s3-auth: Move auth_ntlmssp wrappers in their own fileSimo Sorce2010-07-201-0/+1
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3-auth: Use talloc hierarchies to properly free auth_ntlmssp_state contextsSimo Sorce2010-07-191-1/+1
| | | | | | | Turn auth_ntlmssp_end into a destructor and attach it to auth_ntlmssp_state. Remote auth_ntlmssp_end and use TALLOC_FREE in the callers. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* ntlmssp: Make the ntlmssp.h from source3/ a common headerAndrew Bartlett2010-05-311-1/+1
| | | | | | | | | The code is not yet in common, but I hope to fix that soon. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Günther Deschner <gd@samba.org>
* s3:auth Remove AUTH_NTLMSSP_STATE typedef.Andrew Bartlett2010-05-311-1/+1
| | | | | | | | | typedefs are no longer preferred Samba style. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Günther Deschner <gd@samba.org>
* s3:auth Make AUTH_NTLMSSP_STATE a private structure.Andrew Bartlett2010-05-311-3/+6
| | | | | | | | | This makes it a little easier for it to writen in terms of GENSEC in future. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Günther Deschner <gd@samba.org>
* s3:ntlmssp: only include ntlmssp.h where actually neededAndrew Bartlett2009-12-221-0/+1
| | | | Andrew Bartlett
* spnego: share spnego_parse.Günther Deschner2009-09-171-0/+1
| | | | Guenther
* s3:smbd: move all globals and static variables in globals.[ch]Stefan Metzmacher2009-01-081-3/+1
| | | | | | The goal is to move all this variables into a big context structure. metze
* Fix more asprintf warnings and some error path errors.Jeremy Allison2008-12-231-2/+1
| | | | Jeremy.
* s3: fix another build warning.Günther Deschner2008-10-131-4/+4
| | | | Guenther
* Cope with the fact that the data blobs returned are nowJelmer Vernooij2008-10-121-4/+20
| | | | | | | talloc-allocated. Ideally, this memory should be talloc-stolen (and perhaps have DATA_BLOB in the interface everywhere), but that requires some more complex changes so I've just changed it to copy it for now.
* Remove unused variable.James Peach2008-04-071-1/+0
| | | | (This used to be commit 3ed2c65bde0c2e5ad10cf777dae8a2d3e626a42c)
* Fix Kerberos interop with Mac OS X 10.5 clients.Bill Ricker2008-04-071-2/+5
| | | | | | Ignore optional req_flags. Use the Kerberos mechanism OID negotiated with the client rather than hardcoding OID_KERBEROS5_OLD. (This used to be commit 59a2bcf30fef14ecc826271862b645dd3a61cb48)
* Currently we don't SPNEGO negotiate back to NTLMSSP. Note this.Jeremy Allison2008-02-141-4/+16
| | | | | Jeremy. (This used to be commit 8cd04b948bfba3896d40c9e314a197f60ad76833)
* Simplify... plus add a debug message.Jeremy Allison2008-01-081-5/+5
| | | | | Jeremy. (This used to be commit bedc493874adaf783362ba7b821e2a6d985b96ea)
* Correctly identify enc/non-enc packets.Jeremy Allison2008-01-081-3/+5
| | | | | Jeremy. (This used to be commit 647f13d0f1a270a68263b3b0403436f9d6cf1a0e)
* Refactor the crypto code after a very helpful conversationJeremy Allison2008-01-041-15/+29
| | | | | | | with Volker. Mostly making sure we have data on the incoming packet type, not stored in the smb header. Jeremy. (This used to be commit c4e5a505043965eec77b5bb9bc60957e8f3b97c8)
* As the encryption is stream based there's no reasonJeremy Allison2007-12-301-0/+9
| | | | | | | | oplock breaks can't be encrypted. If we have multiple contexts I should probably attach them to the connection struct, but for now use the global context number. Jeremy. (This used to be commit 5b4b335ed0d1dc738f1f099e5c638361f3aede07)
* Add SMB encryption. Still fixing client decrypt butJeremy Allison2007-12-261-0/+703
| | | | | | negotiation works. Jeremy. (This used to be commit d78045601af787731f0737b8627450018902b104)