samba.git/libcli/auth, branch talloc-2.4.4

libcli/auth: let NTLMv2_RESPONSE_verify_netlogon_creds() check RODC callers check computer_name

2025-02-22T16:00:36+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/auth: let NTLMv2_RESPONSE_verify_netlogon_creds() return the computer_name

2025-02-22T16:00:36+00:00

This will be used to implement the MS-NRPC 3.5.4.5.1.2 RODC server cachability validation.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/auth: add NTLMv2_RESPONSE_verify_trust() checking

2025-02-22T16:00:36+00:00

This implements MS-NRPC 3.5.4.5.1.1 Pass-through domain name validation.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/auth: pass trust_forest_domain_info array to NTLMv2_RESPONSE_verify_netlogon_creds

2025-02-22T16:00:36+00:00

This will be used in the next commits in order to
implement MS-NRPC 3.5.4.5.1.1 Pass-through domain name validation.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/auth: split out NTLMv2_RESPONSE_verify_workstation()

2025-02-22T16:00:36+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Ralph Boehme

libcli/auth: add support for ServerAuthenticateKerberos()

2025-01-13T23:40:30+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jennifer Sutton

libcli/auth: add netlogon_creds_cli_use_kerberos() helper

2025-01-13T23:40:30+00:00

This allows the calling code to decide if a krb5 or anonymous
netlogon connection should be tried.

Currently we don't try ServerAuthenticateKerberos, but that will change
in a few commits. But before we need to prepare the callers...

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jennifer Sutton

libcli/auth: let schannel_check_creds_state() take an access_check callback

2024-12-12T13:59:29+00:00

This allows the callback to decide if the updated creds should be stored
or not.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

libcli/auth: add infrastructure for netr_ServerAuthenticateKerberos()

2024-12-12T13:59:29+00:00

This shows that STRONG_KEY without ARCFOUR means no encryption
for ServerPasswordSet2.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

libcli/auth: add let netlogon_creds_alloc() use _talloc_keep_secret()

2024-12-12T13:59:29+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider