samba.git/source4/auth/ntlm/wscript_build, branch talloc-2.4.0

s4-auth: For LDAP simple bind, fall back to checking the ENCTYPE_AES256_CTS_HMAC_SHA1_96 if stored

2022-06-26T22:10:29+00:00

Since we don't store a salt per-key, but only a single salt, when we do
not have the NT hash in the unicodePwd (eg ntlm auth = disabled), the check
will fail for a previous password if the account was renamed prior to a
newer password being set.

Pair-Programmed-With: Stefan Metzmacher 

Signed-off-by: Andrew Bartlett 
Signed-off-by: Stefan Metzmacher 
Reviewed-by: Stefan Metzmacher

s4-auth: Only build auth_developer module in developer mode

2022-03-29T02:33:34+00:00

This is a silly module for provoking NTSTATUS replies for testing and
was useful many moons ago for determining the NTSTATUS -> DOS table that
windows uses.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

auth4: Remove unused auth_unix

2021-04-19T07:07:01+00:00

auth_unix was in the source4/auth/ntlm for two reasons:
 - inherited from earlier Samba before the Samba4 fork
 - To support the ejs-backed SWAT (web administration tool)

Neither of these are good reasons to keep this unused code
around, there is very unlikely to be a need to support
plaintext PAM authentication in this part of the code in the
future.

See b16362fab65d0700bd6a8cf6569a9e21c7e6b069 for some
context on the historical use case.

Signed-off-by: Andrew Bartlett 
Reviewed-by: Volker Lendecke 

Autobuild-User(master): Volker Lendecke 
Autobuild-Date(master): Mon Apr 19 07:07:01 UTC 2021 on sn-devel-184

auth4: Make auth_developer pseudo-async

2021-04-16T09:38:35+00:00

This is a simpler approach to really just wrap the code.

Signed-off-by: Volker Lendecke 
Reviewed-by: Andrew Bartlett

auth4: Make auth_anonymous pseudo-async

2021-04-16T09:38:35+00:00

Signed-off-by: Volker Lendecke 
Reviewed-by: Andrew Bartlett

build: add missing crypt dependency for auth4_unix

2019-11-19T04:47:47+00:00

Commit dc5788056bc removed crypt library from replace.  This breaks the
build on fedora 30 ppc64.

  [2439/3956] Linking bin/default/source4/auth/ntlm/libauth4-samba4.so
  /usr/bin/ld: source4/auth/ntlm/auth_unix.c.5.o: in function `password_check':
  auth_unix.c:(.text+0x7e0): undefined reference to `crypt'

crypt library is required to build ntlm auth_unix.c.

Signed-off-by: Amitay Isaacs 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Amitay Isaacs 
Autobuild-Date(master): Tue Nov 19 04:47:47 UTC 2019 on sn-devel-184

build: rename security → samba-security

2012-08-10T12:22:20+00:00

there is a libsecurity on OSF1 which clasheѕ with our security lib. see bug #9023.

Signed-off-by: Stefan Metzmacher 

Autobuild-User(master): Björn Jacke 
Autobuild-Date(master): Fri Aug 10 14:22:21 CEST 2012 on sn-devel-104

build: Add missing deps and make MESSAGING a private library

2012-06-07T04:45:06+00:00

To remove finddcs_nbt these missing deps need to be added.  These
subsystems linked to to implicit dependencies provided by finddcs.
Due to the new arrangmenet of subsystems, MESSAGING needs to be a
private library to avoid being a source of duplicate symbols.

Andrew Bartlett

s4:auth: remove unused auth_server.c

2012-05-15T06:18:29+00:00

metze

s4-gensec: Move parsing of the PAC blob and creating the session_info into auth

2011-12-29T00:10:58+00:00

This uses a single callback to handle the PAC from the DATA_BLOB
format until it becomes a struct auth_session_info.

This allows a seperation between the GSS acceptor code and the PAC
interpretation code based on the supplied auth context.

Andrew Bartlett

Autobuild-User: Andrew Bartlett 
Autobuild-Date: Thu Dec 29 01:10:59 CET 2011 on sn-devel-104