samba.git/libcli/auth/credentials.c, branch talloc-2.4.4

libcli/auth: add infrastructure for netr_ServerAuthenticateKerberos()

2024-12-12T13:59:29+00:00

This shows that STRONG_KEY without ARCFOUR means no encryption
for ServerPasswordSet2.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

libcli/auth: add let netlogon_creds_alloc() use _talloc_keep_secret()

2024-12-12T13:59:29+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

libcli/auth: let netlogon_creds_crypt_samlogon_validation handle generic info

2024-12-05T16:46:37+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

schannel.idl: change netlogon_creds_CredentialState layout for 4.22

2024-12-05T16:46:37+00:00

This breaks compat with 4.21 and moves stuff out of
netlogon_creds_CredentialState_extra_info.

It also prepares support for netr_ServerAuthenticateKerberos()

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

netlogon.idl: add NetlogonTicketLogonInformation/NetlogonValidationTicketLogon

2024-12-05T16:46:37+00:00

I have basic tests, which have shown that the payload is not
encrypted at application level.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

libcli/auth: let netlogon_creds_copy() make use of ndr_deepcopy_struct()

2024-11-28T13:53:25+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Volker Lendecke 

Autobuild-User(master): Volker Lendecke 
Autobuild-Date(master): Thu Nov 28 13:53:25 UTC 2024 on atb-devel-224

libcli/auth: let netlogon_creds_copy() copy all scalar elements

2024-10-30T23:08:36+00:00

This version is good for now, as we want it to be backportable.
For master we'll add a ndr_deepcopy_struct() helper in order
to avoid future problems.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15425

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Douglas Bagnall

libcli/auth: split out netlogon_creds_client_verify() that takes auth_{type,level}

2024-10-30T23:08:36+00:00

This will make it easier to implement netr_ServerAuthenticateKerberos()
later...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15425

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Douglas Bagnall

libcli/auth: pass auth_{type,level} to netlogon_creds_server_step_check()

2024-10-30T23:08:36+00:00

This will make it easier to implement netr_ServerAuthenticateKerberos() later...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15425

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Douglas Bagnall

libcli/auth: return INVALID_PARAMETER for DES in netlogon_creds_{de,en}crypt_samlogon_logon

2024-10-30T23:08:36+00:00

For the NetlogonGenericInformation case we want an error instead of no
encryption if only DES was negotiated...

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15425

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Douglas Bagnall