summaryrefslogtreecommitdiff
path: root/libcli/auth
AgeCommit message (Collapse)AuthorFilesLines
2019-11-14libcli:auth: Check return codes of SMBsesskeygen_ntv2()Andreas Schneider2-4/+28
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14195 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-11-14libcli:auth: Return NTSTATUS for SMBOWFencrypt_ntv2()Andreas Schneider2-10/+19
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14195 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-10-07libcli/auth: add gnutls test for aes-128-cfb8 cipher bugGünther Deschner2-0/+248
Guenther Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Mon Oct 7 09:31:35 UTC 2019 on sn-devel-184
2019-10-07libcli/auth: add test for gensec_schannel codeGünther Deschner2-0/+313
Guenther Signed-off-by: Guenther Deschner <gd@samba.org> Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2019-09-20libcli/auth: add netlogon_creds_cli_LogonGetDomainInfo()Stefan Metzmacher2-1/+297
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org>
2019-08-27libcli/auth: clang: Fix 'Value stored to 'status' is never read'Noel Power1-1/+1
Fixes: libcli/auth/netlogon_creds_cli.c:2622:2: warning: Value stored to 'status' is never read <--[clang] status = netlogon_creds_decrypt_samlogon_validation(&state->tmp_creds, ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 1 warning generated. Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
2019-08-21libcli:auth Check NTSTATUS from netlogon_creds_aes_{en,de}crypt()Andrew Bartlett1-23/+53
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2019-08-21libcli:auth Return NTSTATUS from netlogon_creds_aes_decrypt()Andrew Bartlett2-8/+11
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2019-08-21libcli:auth: Use GnuTLS AES128 CFB for netlogon_creds_aes_decrypt()Andreas Schneider1-1/+40
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-08-21libcli:auth: Return NTSTATUS for netlogon_creds_aes_encrypt()Andreas Schneider2-8/+11
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Adapted by Andrew Bartlett to use gnutls_error_to_ntstatus() Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2019-08-21libcli:auth: Use GnuTLS AES128 CFB for netlogon_creds_aes_encrypt()Andreas Schneider1-0/+36
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-08-21libcli:auth: Use netlogon_creds_aes_encrypt() in netlogon_creds_step_crypt()Andreas Schneider1-5/+2
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-08-14Revert "libcli:auth: Use generate_secret_buffer() for netlogon challenge"Andreas Schneider1-2/+1
This reverts commit c3ba556f52b15dd80efc26e4fb8f43ce2ee3a7f0. Reviewed-by: Alexander Bokovoy <ab@samba.org>
2019-08-12libcli:auth: Use generate_secret_buffer() for netlogon challengeAndreas Schneider1-1/+2
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Mon Aug 12 10:42:35 UTC 2019 on sn-devel-184
2019-07-26libcli:auth: Use samba_gnutls_arcfour_confounded_md5() in ↵Andreas Schneider1-47/+24
decode_wkssvc_join_password_buffer() BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-07-26libcli:auth: Use samba_gnutls_arcfour_confounded_md5() in ↵Andreas Schneider1-46/+23
encode_wkssvc_join_password_buffer() BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-07-26libcli:auth: Add test for (encode|decode)_wkssvc_join_password_bufferAndreas Schneider1-0/+129
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-07-26libcli:auth: Return WERROR for encode_wkssvc_join_password_buffer()Andreas Schneider2-10/+18
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-07-26libcli:auth: Add test for encode_rc4_passwd_buffer()Andreas Schneider1-0/+31
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-07-26libcli:auth: Add encode_rc4_passwd_buffer()Andreas Schneider2-0/+49
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-07-26libcli:auth: Pass samr_CryptPasswordEx to decode_rc4_passwd_buffer()Andreas Schneider3-8/+9
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-07-26libcli:auth: Rename encode_or_decode_arc4_passwd_buffer()Andreas Schneider3-8/+6
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-07-26libcli:auth: Use samba_gnutls_arcfour_confounded_md5() for rc4 passwd bufferAndreas Schneider1-30/+9
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-07-26libcli:auth: Add test for decoding an RC4 password bufferAndreas Schneider2-0/+186
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-07-26libcli:auth: Return NTSTATUS for encode_or_decode_arc4_passwd_buffer()Andreas Schneider2-3/+10
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14031 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-06-27libcli:auth: Return NTSTATUS for netlogon_creds_arcfour_crypt()Andreas Schneider3-23/+64
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-06-27libcli:auth: Return NTSTATUS for netlogon_creds_crypt_samlogon_logon()Andreas Schneider1-13/+11
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-06-27libcli:auth: Return NTSTATUS for netlogon_creds_decrypt_samlogon_logon()Andreas Schneider2-6/+8
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-06-27libcli:auth: Return NTSTATUS for netlogon_creds_encrypt_samlogon_logon()Andreas Schneider3-12/+24
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-06-27libcli:auth: Return NTSTATUS for netlogon_creds_server_step_check()Andreas Schneider1-15/+17
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-06-27libcli:auth: Return NTSTATUS for netlogon_creds_decrypt_samlogon_validation()Andreas Schneider3-12/+22
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-06-27libcli:auth: Return NTSTATUS for netlogon_creds_encrypt_samlogon_validation()Andreas Schneider2-6/+8
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-06-27libcli:auth: Use GnuTLS RC4 for netlogon credentialsAndreas Schneider1-4/+17
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-06-27libcli:auth: Use gnutls_error_to_werror() in smbencryptAndreas Schneider1-3/+4
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-06-27lib/crypto: move gnutls error wrapper to own subsystemAndrew Bartlett2-2/+2
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2019-06-24libcli:auth: Use gnutls_error_to_ntstatus() in credentialsAndreas Schneider1-11/+9
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-05-22libcli/auth: Remove des_crypt64() from smbdesAndrew Bartlett2-12/+0
This has been unused since it was introduced by ad8b47a2ba4e81420bc2272e8438a727cc2223ee in 2006 Found by callcatcher Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
2019-05-21libcli:auth: Add return codes for netlogon_creds_init_128bit()Andreas Schneider1-9/+23
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-05-21libcli:auth: Use GnuTLS MD5 and HMAC MD5 in netlogon_creds_init_128bitAndreas Schneider1-11/+36
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-05-21libcli:auth: Use 'bool ok' in ntv2_owf_gen()Andreas Schneider1-5/+4
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-05-21libcli:auth: Use GnuTLS MD5 HMAC in SMBsesskeygen_ntv2()Andreas Schneider1-6/+6
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-05-21libcli:auth: Use GnuTLS MD5 HMAC in SMBOWFencrypt_ntv2()Andreas Schneider1-5/+21
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-05-21libcli:auth: Use GnuTLS MD5 HMAC in ntv2_owf_gen()Andreas Schneider1-7/+29
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-05-21libcli:auth: Use GnuTLS MD5 in decode_wkssvc_join_password_buffer()Andreas Schneider1-11/+36
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-05-21libcli:auth: Use GnuTLS MD5 in encode_or_decode_arc4_passwd_buffer()Andreas Schneider1-3/+0
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-05-21libcli:auth: Use GnuTLS MD5 in encode_wkssvc_join_password_buffer()Andreas Schneider1-6/+27
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-05-21libcli:auth: Use GnuTLS MD5 in encode_or_decode_arc4_passwd_buffer()Andreas Schneider1-5/+24
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-05-21libcli:auth: Use GnuTLS MD5 for E_md5hash() in smbcryptAndreas Schneider1-5/+25
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-04-30libcli:auth: Add return code for netlogon_creds_init_hmac_sha256()Andreas Schneider1-15/+29
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2019-04-30libcli:auth: Use GnuTLS SHA256 HMAC for credentialsAndreas Schneider2-11/+30
Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>