summaryrefslogtreecommitdiffstats
path: root/src/gss_auth.c
Commit message (Collapse)AuthorAgeFilesLines
* Add more custom error messageSimo Sorce2014-08-101-12/+8
| | | | This should make error reporting a little bit better.
* Add macros to handle returning errorsSimo Sorce2014-08-101-53/+42
| | | | | | These macros prevent the chance of not setting minor_status approproiately. They also hook into the tracing system, so any time an error is set, then it can be traced to exactly what finction (and in which line) it was set.
* Add helper to check for allowed ntlm versionsSimo Sorce2014-08-081-3/+3
| | | | | Also lower the default lm compat level to 3 for broader compatibility. This allows NTLMv1 with no LM auth.
* Add support for NTLMv1 auth to the serverSimo Sorce2014-08-071-16/+74
| | | | Fixes also condition on when to test for a LM Response on the server.
* Fix NTLMv1 client authSimo Sorce2014-08-071-8/+15
| | | | | | The worn nt/lm response buffers were being used after the version specific processing. Use always the same buffers for both protocols to avoid issues.
* Pass ctx and cred to external_xxx_auth functionsSimo Sorce2014-08-071-10/+2
| | | | This allows external auth mechanisms to see all the data they may need.
* Support client authentication using WinbindSimo Sorce2014-08-071-0/+14
| | | | | | | | | | | | Based on a patch by David Woodhouse <David.Woodhouse@intel.com> Original commit message: We need to screw around with the flags a little, since winbind doesn't really get it right. Thankfully, it doesn't support MIC and it does at least generally do the right thing (w.r.t. session negotiation and OEM vs. Unicode) so it's sufficient just to screw with the flags. Tested with Negotiate authentication to squid, and NTLM in datagram mode with pidgin-sipe. Also with Firefox, Chrome and a fixed libcurl.
* Move client auth bits to gss_authSimo Sorce2014-08-071-0/+290
| | | | | This will makes it easier to plug in external auth handlers like winbind.
* Add support to perform external operationsSimo Sorce2014-08-071-0/+104
This allows the code to know it has to use an external mechanism, such as winbind, to handle authentication. Based on work from David Woodhouse <David.Woodhouse@intel.com>