samba.git/auth, branch talloc-2.3.1 Unnamed repository; edit this file 'description' to name the repository. auth:pycreds: Check return code of netlogon_creds_client_authenticator() 2019-11-14T08:01:44+00:00 Andreas Schneider asn@samba.org 2019-11-13T09:06:20+00:00 d3fffca5e9ab45b43fa3f460ad6051356c9a00a9 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14195 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14195

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
spnego: fix server handling of no optimistic exchange 2019-10-12T15:51:42+00:00 Isaac Boukris iboukris@gmail.com 2019-09-04T14:04:12+00:00 23ea12e98ed34d41aee78d8afbe574dfc7e0ff74 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106 Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Sat Oct 12 15:51:42 UTC 2019 on sn-devel-184 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106

Signed-off-by: Isaac Boukris <iboukris@redhat.com>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Sat Oct 12 15:51:42 UTC 2019 on sn-devel-184
spnego: add client option to omit sending an optimistic token 2019-10-12T14:33:33+00:00 Isaac Boukris iboukris@gmail.com 2019-09-04T13:31:21+00:00 d7e57ef7dd7d583cffb7abbe42d71f4f33f2a9af BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106 Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106

Signed-off-by: Isaac Boukris <iboukris@redhat.com>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
spnego: ignore server mech_types list 2019-10-12T14:33:32+00:00 Isaac Boukris iboukris@gmail.com 2019-10-03T10:09:29+00:00 37daeb220e461b842ad9708497699f15c5fa5df3 We should not use the mech list sent by the server in the last 'negotiate' packet in CIFS protocol, as it is not protected and may be subject to downgrade attacks. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106 Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> 
We should not use the mech list sent by the server in the last
'negotiate' packet in CIFS protocol, as it is not protected and
may be subject to downgrade attacks.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106

Signed-off-by: Isaac Boukris <iboukris@redhat.com>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
auth/gensec: fix AES schannel seal and unseal 2019-10-07T08:13:44+00:00 Günther Deschner gd@samba.org 2019-09-17T20:37:06+00:00 f988756599c2f7253989f2ca1dea2975dd89e6ea Workaround bug present in gnutls 3.6.8: gnutls_cipher_decrypt() uses an optimization internally that breaks decryption when processing buffers with their length not being a multiple of the blocksize. Signed-off-by: Stefan Metzmacher <metze@samba.org> Pair-Programmed-With: Guenther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
Workaround bug present in gnutls 3.6.8:

gnutls_cipher_decrypt() uses an optimization
internally that breaks decryption when processing
buffers with their length not being a multiple
of the blocksize.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Pair-Programmed-With: Guenther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
auth/gensec: fix non-AES schannel seal 2019-10-07T08:13:44+00:00 Günther Deschner gd@samba.org 2019-09-20T16:32:43+00:00 709d54d68a9c2cb3cda91d9ab63228a7adbaceb4 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14134 Guenther Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14134

Guenther

Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Spelling fixes s/withing/within/ 2019-09-01T22:21:28+00:00 Mathieu Parent math.parent@gmail.com 2019-08-29T20:39:12+00:00 105bb06318eecd416c8e78b5cbcd3936aa6ec8c8 Signed-off-by: Mathieu Parent <math.parent@gmail.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz> 
Signed-off-by: Mathieu Parent <math.parent@gmail.com>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
auth/gensec: Use gnutls_error_to_ntstatus() in netsec_do_seal() 2019-08-21T09:57:31+00:00 Andrew Bartlett abartlet@samba.org 2019-08-16T03:45:43+00:00 fa8eddc39b4ea9d316201019b603025df5c2fa5e Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
auth:gensec: Use GnuTLS AES CFB8 in netsec_do_seal() 2019-08-21T09:57:30+00:00 Andreas Schneider asn@samba.org 2019-03-18T15:24:54+00:00 025f6a135f930264ddcf1cd1b9e1004464618194 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
auth/gensec: Use gnutls_error_to_ntstatus() consistently in schannel 2019-08-21T09:57:30+00:00 Andrew Bartlett abartlet@samba.org 2019-08-16T03:43:01+00:00 3b27fd8a490f29cbc94b8ac377b3a2cb6db7598c Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>