samba.git/source3/auth, branch talloc-2.3.0

auth auth_log: csbuild unused parm unix_username

2019-06-13T07:16:22+00:00

Fixes csbuild errors

Error: COMPILER_WARNING:
auth/auth_log.c: scope_hint: In function ‘log_authentication_event_json’
auth/auth_log.c:146:14: warning: unused parameter ‘unix_username’
[-Wunused-parameter]

Error: COMPILER_WARNING:
auth/auth_log.c: scope_hint: In function
‘log_authentication_event_human_readable’
auth/auth_log.c:586:14: warning: unused parameter ‘unix_username’
[-Wunused-parameter]

Signed-off-by: Gary Lockyer 
Reviewed-by: Andreas Schneider

s3:auth: explicitly add BUILTIN\Guests to the guest token

2019-06-05T16:55:26+00:00

This changes ensures that smbd always adds BUILTIN\Guests to the guest token
which is required for guest authentication.

Currently the guest token depends on the on-disk configured group mappings. If
there's an existing group mapping for BUILTIN\Guests, but LOCALSAM\Guest is not
a member, the final guest token won't contain BUILTIN\Guests.

For SMB2 the flag SMB2_SESSION_FLAG_IS_GUEST will not be set in the final SMB2
SESSION_SETUP response, because smbd sets it based on the token containing the
BUILTIN\Guests SID S-1-5-32-546.

At the same time, the packet is not signed which causes Windows clients and
smbclient to reject the unsigned SMB2 SESSION_SETUP response.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13944

Pair-programmed-with: Stefan Metzmacher 
Signed-off-by: Ralph Boehme 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Wed Jun  5 16:55:26 UTC 2019 on sn-devel-184

s3:auth: add reinit_guest_session_info()

2019-06-05T15:40:23+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13944

Signed-off-by: Ralph Boehme 
Reviewed-by: Andrew Bartlett

make some auth functions return an NTSTATUS like other similar functions for better diagnostics.

2019-04-02T02:12:48+00:00

Signed-off-by: Kristján Valur 
Reviewed-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Tue Apr  2 02:12:48 UTC 2019 on sn-devel-144

s3:auth: Remove unused arcfour.h from auth_util.c

2019-02-22T20:48:11+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Jeremy Allison

s3:auth: Remove unused arcfour.h header from server_info.c

2019-02-22T20:48:11+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Jeremy Allison

s3 auth: Create messaging and lp contexts.

2019-02-20T05:03:08+00:00

If 'auth event notifications' are enabled create an imessaging_context
and a loadparm_context that can be passed to log_authentication_event.

This will allow the generated authentication messages to be tested.

Signed-off-by: Gary Lockyer 
Reviewed-by: Andrew Bartlett

auth3: Use dom_sid_str_buf

2019-01-08T02:40:27+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Jeremy Allison

auth3: Use dom_sid_str_buf

2018-12-20T22:40:25+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Gary Lockyer

s3:auth_winbind: ignore a missing winbindd as NT4 PDC/BDC without trusts

2018-12-20T11:15:09+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13722

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Alexander Bokovoy 

Autobuild-User(master): Alexander Bokovoy 
Autobuild-Date(master): Thu Dec 20 12:15:09 CET 2018 on sn-devel-144