summaryrefslogtreecommitdiffstats
path: root/source3/librpc/crypto/cli_spnego.c
Commit message (Collapse)AuthorAgeFilesLines
* s3-librpc: Use gensec_spnego for DCE/RPC authenticationAndrew Bartlett2012-02-161-334/+0
| | | | | | | | | | | | | This ensures that we use the same SPNEGO code on session setup and on DCE/RPC binds, and simplfies the calling code as spnego is no longer a special case in cli_pipe.c A special case wrapper function remains to avoid changing the application layer callers in this patch. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Remove special case for spnego session keyAndrew Bartlett2012-01-181-12/+0
| | | | | | | | SPNEGO is implemented only in terms of gensec mechanisms now. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Remove layer around struct gensec_securityAndrew Bartlett2012-01-181-8/+8
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc: Simplify SPNEGO code now that all mechs use a struct gensec_securityAndrew Bartlett2012-01-181-76/+27
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Call SPENGO/GSSAPI via the auth_generic layer and gensecAndrew Bartlett2012-01-181-84/+14
| | | | | | | | | | This simplifies a lot of code, as we know we are always dealing with a struct gensec_security, and allows the gensec module being used to implement GSSAPI to be swapped for AD-server operation. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Allow spnego_generic_init_client to handle kerberos tooAndrew Bartlett2012-01-181-0/+2
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Supply target service and server to spnego_generic_init_client()Andrew Bartlett2012-01-111-0/+14
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc: Rename spnego_ntlmssp_init_client and make genericAndrew Bartlett2012-01-111-3/+13
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libsmb Make auth_ntlmssp client more genericAndrew Bartlett2012-01-061-12/+13
| | | | | | | | | As well as renaming, this allows us to start the mech by DCE/RPC auth type or OID. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth rename auth_ntlmssp_state -> auth_generic_stateAndrew Bartlett2011-12-221-1/+1
| | | | | | | | | This structure handles more than NTLMSSP now, at least when we are an AD DC and so changing the name may avoid some confusion in the future. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove references to auth_ntlmssp_context from the rpc codeAndrew Bartlett2011-10-211-16/+19
| | | | | | | | | We always dereferenced auth_ntlmssp_state->gensec_security, so now we do not bother passing around the whole auth_ntlmssp_state. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_session_key()Andrew Bartlett2011-10-211-2/+7
| | | | | | | | We now just call the gensec_session_key() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_want_feature()Andrew Bartlett2011-10-211-4/+4
| | | | | | | | We now just call the gensec_want_feature() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp use gensec_{seal,unseal,sign,check}_packetAndrew Bartlett2011-10-211-22/+22
| | | | | | | | This avoids the indirection via the auth_ntlmsssp wrapper functions. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_update wrapperAndrew Bartlett2011-10-211-2/+3
| | | | | | | | We now just call gensec_update directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp split auth_ntlmssp_client_start() into two partsAndrew Bartlett2011-10-181-4/+7
| | | | | | | | | | | This will allow it to be a wrapper around a gensec module, which requires that they options be set on a context, but before the mechanism is started. This also simplfies the callers, by moving the lp_*() calls into one place. Andrew Bartlett
* ntlmssp: Move ntlmssp code to auth/ntlmsspAndrew Bartlett2011-10-181-1/+1
| | | | | | | | | This brings in the code from both libcli/auth and source4/auth/ntlmssp. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3: Remove an unused variableVolker Lendecke2011-09-301-2/+0
|
* s3-ntlmssp Remove auth_ntlmssp_and_flags()Andrew Bartlett2011-08-031-7/+0
| | | | | | | | | | | There is no need to mask out these flags as they simply are not set yet. The correct abstraction is to ask for NTLMSSP features. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_or_flagsAndrew Bartlett2011-08-031-5/+4
| | | | | | | | | We now just use auth_ntlmssp_want_feature to get extra flags on the NTLMSSP context Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Remove calls to auth_ntlmssp_and_flags from the serverAndrew Bartlett2011-08-031-0/+1
| | | | | | | | | | | | This is changed so that the callers ask for the additional flags that they need, starting with no additional flags. This helps to create a proper abstraction layer in ntlmssp_wrap/auth_ntlmssp. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Add mem_ctx argument to auth_ntlmssp_updateAndrew Bartlett2011-08-031-1/+1
| | | | | | | | This clarifies the lifetime of the returned token. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Add mem_ctx argument to auth_ntlmssp_get_session_key()Andrew Bartlett2011-08-031-3/+2
|
* s3-param Remove special case for global_myname(), rename to lp_netbios_name()Andrew Bartlett2011-06-091-1/+1
| | | | | | | | There is no reason this can't be a normal constant string in the loadparm system, now that we have lp_set_cmdline() to handle overrides correctly. Andrew Bartlett
* s3-dcerpc: add spnego server helpersSimo Sorce2010-09-231-1/+87
| | | | | | squashed: add michlistMIC signature checks Signed-off-by: Günther Deschner <gd@samba.org>
* spnego: make spnego_context publicSimo Sorce2010-09-231-19/+0
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3-dcerpc: move client spnego stuff in /librpc/cryptoSimo Sorce2010-09-231-0/+369
Signed-off-by: Günther Deschner <gd@samba.org>