samba.git/source3/libads/sasl.c, branch talloc-2.4.0

s3:libads: Disable NTLMSSP if not allowed (for builds without kerberos)

2022-01-21T23:33:36+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14955

Pair-Programmed-With: Andreas Schneider 

Signed-off-by: Pavel Filipenský 
Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

s3:libads: Improve debug messages for SASL bind

2022-01-21T23:33:36+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14955

Pair-Programmed-With: Andreas Schneider 

Signed-off-by: Pavel Filipenský 
Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

s3:libads: Disable NTLMSSP for FIPS

2022-01-21T23:33:36+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14955

Pair-Programmed-With: Andreas Schneider 

Signed-off-by: Pavel Filipenský 
Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

s3:libads: Remove trailing spaces from sasl.c

2022-01-21T23:33:36+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14955

Signed-off-by: Pavel Filipenský 
Signed-off-by: Andreas Schneider 
Reviewed-by: Stefan Metzmacher

auth:creds: Add obtained arg to cli_credentials_set_kerberos_state()

2021-04-28T03:43:34+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Andrew Bartlett

auth:creds: Rename CRED_USE_KERBEROS values

2020-11-03T15:25:37+00:00

Signed-off-by: Andreas Schneider 
Reviewed-by: Alexander Bokovoy

s3:libads: remove unused "GSSAPI" support

2020-06-09T17:24:30+00:00

All AD servers support "GSS-SPNEGO". So we better
remove code that doesn't use gensec.

If we ever need this back we could use the
"gssapi_krb5_sasl" gensec module explicit
or just pass the SASL mech list to gensec.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Isaac Boukris 
Reviewed-by: Andreas Schneider 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Tue Jun  9 17:24:31 UTC 2020 on sn-devel-184

s3/libads: clang: Fix 'Value stored to 'nt_status' is never read'

2019-09-26T18:41:27+00:00

Fixes:

source3/libads/sasl.c:219:2: warning: Value stored to 'nt_status' is never read <--[clang]
        nt_status = NT_STATUS_MORE_PROCESSING_REQUIRED;
        ^           ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1 warning generated.

Signed-off-by: Noel Power 
Reviewed-by: Jeremy Allison

libads: Add kerberos tracing

2018-12-19T20:49:29+00:00

Replace kerberos context initialization from
raw krb5_init_context() to smb_krb5_init_context_basic()
which is adding common tracing as well.

Signed-off-by: Swen Schillig 
Reviewed-by: Andrew Bartlett 
Reviewed-by: Christof Schmitt

libads: abstract out SASL wrapping code

2017-05-17T21:02:09+00:00

Prepare for rebasing libads on top of libsmbldap.

To make libads using 'struct smbldap_state' instead of direct LDAP
structure, we need to abstract out libads logic from connection
handling. SASL wrapping does not really depend on availability of LDAP
handle and does not need direct access to ADS_STRUCT. As result, we'll
be able to move SASL wrapping code under smbldap once the latter is able
to pass settings that libads passes to the SASL wrapping.

Signed-off-by: Alexander Bokovoy 
Reviewed-by: Jeremy Allison