samba.git/libcli/auth/wscript_build, branch talloc-2.4.2

libcli:auth: Add test for encode_pwd_buffer514_from_str()

2022-07-28T11:51:28+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

librpc: Remove the gensec dependency from library dcerpc-binding

2021-04-06T23:33:14+00:00

This means yet another library, but having to depend on gensec just
for dcerpc_parse_binding() and basic packet parsing seems like a bit
overkill to me.

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Tue Apr  6 23:33:14 UTC 2021 on sn-devel-184

CVE-2020-1472(ZeroLogon): libcli/auth: reject weak client challenges in netlogon_creds_server_init()

2020-09-18T12:48:38+00:00

This implements the note from MS-NRPC 3.1.4.1 Session-Key Negotiation:

 7. If none of the first 5 bytes of the client challenge is unique, the
    server MUST fail session-key negotiation without further processing of
    the following steps.

It lets ./zerologon_tester.py from
https://github.com/SecuraBV/CVE-2020-1472.git
report: "Attack failed. Target is probably patched."

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14497

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Gary Lockyer

smbdes: add des_crypt56_gnutls() using DES-CBC with zeroed IV

2019-12-10T00:30:30+00:00

Signed-off-by: Isaac Boukris 
Reviewed-by: Andrew Bartlett

libcli/auth: test des_crypt56() and add test_gnutls to selftest

2019-12-10T00:30:29+00:00

Signed-off-by: Isaac Boukris 
Reviewed-by: Andrew Bartlett

build: Do not build selftest binaries for builds without --enable-selftest

2019-11-22T11:48:59+00:00

Add new for_selftest option to SAMBA_BINARY() and SAMBA3_BINARY()

This allows us to be much more consistent (at least in the core Samba)
and documents clearly why the binary should not be installed.

Not modified are
 - test_lp_load
 - notifyd-tests
 - gendrandperf
 - test* from examples/libsmbclient
 - dbwrap_torture
 - split_tokens
 - locktest2
 - msgtest
 - msg_sink
 - msg_source
 - versiontest
 - rpc_open_tcp
 - test_headers

As these are not tested in selftest so any change would also be
untested.  Of course they probably should be added in a different
MR.

Also not modified (because they are not tests, nor part of the
build system) are:
 - smb2mount
 - notifydd
 - log2pacp
 - debug2html
 - smbfilter
 - destroy_netlogon_creds_cli
 - spotlight2*
 - tevent_glib_tracker

These do however appear to be untested.

For now, the source4 forked client tools are left unchanged:
 - smbclient4
 - nmblookup4

Finally, the heimdal binaries are left as install=False as
they are either part of the build system or end-user tools
that we just don't want to install.  These are however tested.

The motivation is commit like c34ec003b7d45aa4196ff93a0ac29694b25e5309
and da87fa998ab71328f30bcdf5b41aee8675aee48a, which are both totally
correct but are not needed if the selftest is not run on MacOS.

There are likely other platforms or build environments where building
our test binaries is more pain than valuable, see for example also
https://lists.samba.org/archive/samba/2019-November/227137.html

Signed-off-by: Andrew Bartlett 
Reviewed-by: Isaac Boukris 

Autobuild-User(master): Isaac Boukris 
Autobuild-Date(master): Fri Nov 22 11:48:59 UTC 2019 on sn-devel-184

libcli/auth: add gnutls test for aes-128-cfb8 cipher bug

2019-10-07T09:31:35+00:00

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Andreas Schneider 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Mon Oct  7 09:31:35 UTC 2019 on sn-devel-184

libcli/auth: add test for gensec_schannel code

2019-10-07T08:13:44+00:00

Guenther

Signed-off-by: Guenther Deschner 
Pair-Programmed-With: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

libcli:auth: Add test for decoding an RC4 password buffer

2019-07-26T01:48:22+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

lib/crypto: move gnutls error wrapper to own subsystem

2019-06-27T12:54:22+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Andreas Schneider