samba.git/libcli/auth, branch talloc-2.2.0

libcli:auth: Remove unused header file

2019-02-27T10:00:32+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Volker Lendecke 

Autobuild-User(master): Volker Lendecke 
Autobuild-Date(master): Wed Feb 27 10:00:32 UTC 2019 on sn-devel-144

libcli:auth: Only use the required md4 header

2019-02-27T07:59:27+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Volker Lendecke

libcli:auth: Only use the required md4 header

2019-02-27T07:59:27+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Volker Lendecke

libcli:auth: Avoid explicit ZERO_STRUCT

2019-02-27T02:22:50+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Wed Feb 27 03:22:50 CET 2019 on sn-devel-144

libcli: Solaris cc can't return void values

2019-02-03T12:52:29+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

libcli:auth: Use C99 initializers or ZERO_ARRAY instead of ZERO_STRUCT

2018-12-20T11:16:40+00:00

ZERO_STRUCT is not wrong here, it will give the same result, but better
use macros with correct naming as it makes clear what happens when you
read the code.

Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

Fix uClibc build on 64bit platforms by including stdint.h

2018-08-24T15:22:09+00:00

Fixes an error detected by buildroot autobuilders:
http://autobuild.buildroot.net/results/573/573e2268e205e10d1352fa81122d8f225fdb4575/build-end.log

/home/rclinux/rc-buildroot-test/scripts/instance-1/output/host/mips64el-buildroot-linux-uclibc/sysroot/usr/include/stdint.h:122:27:
error: conflicting types for 'uintptr_t'
 typedef unsigned long int uintptr_t;
                           ^
In file included from ../lib/ldb/tests/ldb_msg.c:17:0:
../third_party/cmocka/cmocka.h:126:28: note: previous declaration of 'uintptr_t' was here
       typedef unsigned int uintptr_t;

The define __WORDSIZE is missing when cmocka.h decides how to
define uintptr_t, this patch includes stdint.h when needed.

Patch sent upstream:
https://lists.samba.org/archive/samba-technical/2018-January/125306.html

Signed-off-by: Bernd Kuhls 
Reviewed-by: Volker Lendecke 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Volker Lendecke 
Autobuild-Date(master): Fri Aug 24 17:22:10 CEST 2018 on sn-devel-144

CVE-2018-1139 libcli/auth: Do not allow ntlmv1 over SMB1 when it is disabled via "ntlm auth".

2018-08-14T11:57:15+00:00

This fixes a regression that came in via 00db3aba6cf9ebaafdf39ee2f9c7ba5ec2281ea0.

Found by Vivek Das  (Red Hat QE).

In order to demonstrate simply run:

smbclient //server/share -U user%password -mNT1 -c quit \
--option="client ntlmv2 auth"=no \
--option="client use spnego"=no

against a server that uses "ntlm auth = ntlmv2-only" (our default
setting).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13360

CVE-2018-1139: Weak authentication protocol allowed.

Guenther

Pair-Programmed-With: Stefan Metzmacher 
Signed-off-by: Guenther Deschner 
Reviewed-by: Andreas Schneider 
Reviewed-by: Jeremy Allison 
Reviewed-by: Gary Lockyer

CVE-2018-1139 libcli/auth: fix debug messages in hash_password_check()

2018-08-14T11:57:15+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13360

CVE-2018-1139: Weak authentication protocol allowed.

Guenther

Signed-off-by: Guenther Deschner 
Reviewed-by: Andreas Schneider 
Reviewed-by: Jeremy Allison 
Reviewed-by: Gary Lockyer

CVE-2018-1139 libcli/auth: Add initial tests for ntlm_password_check()

2018-08-14T11:57:15+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13360

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jeremy Allison 
Reviewed-by: Gary Lockyer