samba.git/auth/common_auth.h, branch talloc-2.3.3

auth: Simplify struct auth4_context

2020-01-06T23:34:00+00:00

The fake async code has been pushed down into the 3 users, remove the sync
callback. Overall it's more lines of code, but the central interface is
simplified.

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Mon Jan  6 23:34:00 UTC 2020 on sn-devel-184

auth auth_log: csbuild unused parm unix_username

2019-06-13T07:16:22+00:00

Fixes csbuild errors

Error: COMPILER_WARNING:
auth/auth_log.c: scope_hint: In function ‘log_authentication_event_json’
auth/auth_log.c:146:14: warning: unused parameter ‘unix_username’
[-Wunused-parameter]

Error: COMPILER_WARNING:
auth/auth_log.c: scope_hint: In function
‘log_authentication_event_human_readable’
auth/auth_log.c:586:14: warning: unused parameter ‘unix_username’
[-Wunused-parameter]

Signed-off-by: Gary Lockyer 
Reviewed-by: Andreas Schneider

auth log: Log the netlogon logon id.

2019-02-20T05:03:09+00:00

Add code to log the logonId in the JSON Authentication messages.

The version number for Authentication messages changes from 1.1 to 1.2
to reflect this.

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

auth: For NTLM and KDC authentication, log the authentication duration

2018-06-25T06:32:14+00:00

This is not a general purpose profiling solution, but these JSON logs are already being
generated and stored, so this is worth adding.

Some administrators are very keen to know how long authentication
takes, particularly due to long replication transactions in other
processes.

This complements a similar patch set to log the transaction duration.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Gary Lockyer

auth/common: add support for auth4_ctx->check_ntlm_password_send/recv()

2017-08-07T13:20:03+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

heimdal: Pass extra information to hdb_auth_status() to log success and failures

2017-03-29T00:37:28+00:00

We now pass on the original client name and the client address to allow
consistent audit logging in Samba across multiple protocols.

We use config->db[0] to find the first database to record incorrect
users.

Signed-off-by: Andrew Bartlett

auth: Add hooks for notification of authentication events over the message bus

2017-03-29T00:37:28+00:00

This will allow tests to be written to confirm the correct events are triggered.

We pass in a messaging context from the callers

Signed-off-by: Andrew Bartlett

auth: Log the transport connection for the authorization

2017-03-29T00:37:27+00:00

We also log if a simple bind was over TLS, as this particular case matters to a lot of folks

Signed-off-by: Andrew Bartlett 
Signed-off-by: Andrew Bartlett

auth_log: Also log the final type of authentication (ntlmssp,krb5)

2017-03-29T00:37:27+00:00

Administrators really care about how their users were authenticated, so make
this clear.

Signed-off-by: Andrew Bartlett 
Pair-Programmed-by: Gary Lockyer 
Signed-off-by: Gary Lockyer

auth: Add logging of service authorization

2017-03-29T00:37:27+00:00

In ntlm_auth.c and authdata.c, the session info will be incomplete

Signed-off-by: Andrew Bartlett 
Pair-Programmed-by: Gary Lockyer 
Signed-off-by: Gary Lockyer