samba.git/libcli, branch talloc-2.1.10

param: Add new "disabled" value to "ntlm auth" to disable NTLM totally

2017-07-04T04:57:20+00:00

Signed-off-by: Andrew Bartlett 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11923
Reviewed-by: Garming Sam

auth: Allow NTLMv1 if MSV1_0_ALLOW_MSVCHAPV2 is given and re-factor 'ntlm auth ='

2017-07-04T04:57:20+00:00

The ntlm auth parameter is expanded to more clearly describe the
role of each option, and to allow the new mode that permits MSCHAPv2
(as declared by the client over the NETLOGON protocol) while
still banning NTLMv1.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12252
Signed-off-by: Andrew Bartlett 

Based on a patch by Mantas Mikulėnas :

Commit 0b500d413c5b ("Added MSV1_0_ALLOW_MSVCHAPV2 flag to ntlm_auth")
added the --allow-mschapv2 option, but didn't implement checking for it
server-side. This implements such checking.

Additionally, Samba now disables NTLMv1 authentication by default for
security reasons. To avoid having to re-enable it globally, 'ntlm auth'
becomes an enum and a new setting is added to allow only MSCHAPv2.

Signed-off-by: Mantas Mikulėnas 
Reviewed-by: Garming Sam

libcli/auth: pass the cleartext blob to netlogon_creds_cli_ServerPasswordSet*()

2017-06-27T14:57:46+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

libcli/auth: add const to set_pw_in_buffer()

2017-06-27T14:57:46+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

libcli/auth: pass an array of nt_hashes to netlogon_creds_cli_auth*()

2017-06-27T14:57:45+00:00

This way the caller can pass more than 2 hashes and can only
know which hash was used for a successful connection.

We allow up to 4 hashes (next, current, old, older).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12782

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andreas Schneider

libcli/smb: add smb_protocol_types_string()

2017-06-22T11:07:40+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

libcli: smb: Add smb2cli_tcon_set_id().

2017-06-17T04:39:19+00:00

Will be used in test and client code.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12831

Signed-off-by: Jeremy Allison 
Reviewed-by: Richard Sharpe

libcli: smb: Add smbXcli_tcon_copy().

2017-06-17T04:39:19+00:00

Makes a deep copy of a struct smbXcli_tcon *, will
be used later.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12831

Signed-off-by: Jeremy Allison 
Reviewed-by: Richard Sharpe

libcli:smb2: Gracefully handle not supported for FSCTL_VALIDATE_NEGOTIATE_INFO

2017-06-15T15:32:45+00:00

If FSCTL_VALIDATE_NEGOTIATE_INFO is not implemented, e.g. in a SMB2 only
server then gracefully handle NT_STATUS_NOT_SUPPORTED too.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12808

Signed-off-by: Andreas Schneider 
Signed-off-by: Guenther Deschner 
Pair-Programmed-With: Guenther Deschner 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Volker Lendecke 
Autobuild-Date(master): Thu Jun 15 17:32:45 CEST 2017 on sn-devel-144

libcli:smb: Add unit test for smb_bytes_pull_str()

2017-06-09T11:00:11+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12824

Pair-Programmed-With: Stefan Metzmacher 
Signed-off-by: Andreas Schneider 
Signed-off-by: Stefan Metzmacher