samba.git/auth, branch talloc-2.3.4

auth: Covscan: unchecked return value for cli_credentials_set_smb_encryption()

2022-05-14T03:49:32+00:00

Signed-off-by: Pavel Filipenský 
Reviewed-by: Jeremy Allison 
Reviewed-by: Douglas Bagnall

auth: Fix trailing whitespace in pycredentials.c

2022-05-14T03:49:32+00:00

Signed-off-by: Pavel Filipenský 
Reviewed-by: Jeremy Allison 
Reviewed-by: Douglas Bagnall

auth/credentials: Add encrypt_samr_password()

2022-03-18T11:55:30+00:00

This method encrypts a samr_Password structure with the current session
key, which allows for interactive SamLogon from Python.

Signed-off-by: Joseph Sutton 
Reviewed-by: Stefan Metzmacher

auth: Add required headers to auth_sam_reply.h

2022-03-17T00:41:33+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Joseph Sutton

auth: let auth logging prefer user_info->orig_client.{account,domain}_name if available

2022-03-10T03:16:35+00:00

The optional user_info->orig_client.{account,domain}_name are
the once really used by the client and should be used in
audit logging. But we still fallback to
user_info->client.{account,domain}_name.

This will be important for the next commit.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13879

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

s4:auth: rename user_info->mapped_state to user_info->cracknames_called

2022-03-10T03:16:35+00:00

This makes it much clearer what it is used for and
it is a special hack for authenticate_ldap_simple_bind_send()
in order to avoid some additional work in
authsam_check_password_internals().

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13879

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/ntlmssp: don't set mapped_state explicitly in auth_usersupplied_info

2022-03-10T03:16:35+00:00

We already use talloc_zero() and mapped_state will be removed in the
next commits.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13879

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth: Cope with NULL upn_name in PAC

2022-03-01T17:11:35+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14995

Signed-off-by: Joseph Sutton 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

auth/ntlmssp: make sure we return INVALID_PARAMETER for NTLMv2_RESPONSE parsing errors

2022-01-04T20:57:41+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14932

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Tue Jan  4 20:57:41 UTC 2022 on sn-devel-184

auth/credentials: cli_credentials_set_ntlm_response() pass session_keys

2022-01-04T20:07:28+00:00

Otherwise cli_credentials_get_ntlm_response() will return session keys
with a 0 length, which leads to errors in the NTLMSSP code.

This wasn't noticed as cli_credentials_set_ntlm_response() has no
callers yet, but that will change in the next commits.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14932

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison