samba.git/source4/auth/ntlm/auth_developer.c, branch talloc-2.4.0

CVE-2022-2031 auth: Add ticket type field to auth_user_info_dc and auth_session_info

2022-07-27T10:52:36+00:00

This field may be used to convey whether we were provided with a TGT or
a non-TGT. We ensure both structures are zeroed out to avoid incorrect
results being produced by an uninitialised field.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15047
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15049

Signed-off-by: Joseph Sutton 
Reviewed-by: Andreas Schneider

auth4: Make auth_developer pseudo-async

2021-04-16T09:38:35+00:00

This is a simpler approach to really just wrap the code.

Signed-off-by: Volker Lendecke 
Reviewed-by: Andrew Bartlett

lib/util: remove extra safe_string.h file

2020-08-28T02:18:40+00:00

lib/util/safe_string.h is similar to source3/include/safe_string.h, but
the former has fewer checks. It is missing bcopy, strcasecmp, and
strncasecmp.

Add the missing elements to lib/util/safe_string.h remove the other
safe_string.h which is in the source3-specific path. To accomodate
existing uses of str(n?)casecmp, add #undef lines to source files where
they are used.

Signed-off-by: Matthew DeVore 
Reviewed-by: David Mulder 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Fri Aug 28 02:18:40 UTC 2020 on sn-devel-184

auth: Use DBGC_AUTH as DBGC_CLASS for AD DC NTLM auth code.

2018-05-21T21:48:18+00:00

Signed-off-by: Andrew Bartlett 
Reviewed-by: Jeremy Allison

auth4: Add authoritative flag to check_password

2017-05-30T06:06:06+00:00

Signed-off-by: Garming Sam 
Reviewed-by: Andrew Bartlett

s4: auth: Add TALLOC_CTX * to auth_register()

2017-05-11T18:30:12+00:00

Use the talloc context passed into all modules.
Remove one more talloc_autofree_context().

Signed-off-by: Jeremy Allison 
Reviewed-by: Andreas Schneider

lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *)

2017-04-21T23:17:00+00:00

Not currently used - no logic changes inside.

This will make it possible to pass down a long-lived talloc
context from the loading function for modules to use instead
of having them internally all use talloc_autofree_context()
which is a hidden global.

Updated all known module interface numbers, and added a
WHATSNEW.

Signed-off-by: Jeremy Allison 
Signed-off-by: Ralph Böhme 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Sat Apr 22 01:17:00 CEST 2017 on sn-devel-144

auth: Remove .get_challenge (only used for security=server)

2012-07-02T22:13:01+00:00

With NTLMSSP, for NTLM2 we need to be able to set the effective challenge,
so if we ever did use a module that needed this functionlity, we would
downgrade to just NTLM.

Now that security=server has been removed, we have no such module.

This will make it easier to make the auth subsystem async, as we will
not need to consider making .get_challenge async.

Andrew Bartlett

s4-auth Rename auth -> auth4 to avoid conflict with s3 auth

2011-05-08T08:56:26+00:00

source4/auth/ntlm: Fix prototypes for all functions.

2011-03-19T02:20:05+00:00