summaryrefslogtreecommitdiff
path: root/librpc/rpc/server
AgeCommit message (Collapse)AuthorFilesLines
2024-12-12librpc/server: call dcesrv_netr_check_schannel() as ↵Stefan Metzmacher1-12/+59
schannel_check_creds_state() callback If schannel is not used we need to return ACCESS_DENIED and discard the effect of netlogon_creds_server_step_check(). Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2024-12-12libcli/auth: let schannel_check_creds_state() take an access_check callbackStefan Metzmacher1-0/+2
This allows the callback to decide if the updated creds should be stored or not. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2024-12-12librpc/server: prepare schannel_util.c for netr_ServerAuthenticateKerberosStefan Metzmacher1-1/+51
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2024-12-05schannel.idl: change netlogon_creds_CredentialState layout for 4.22Stefan Metzmacher1-2/+2
This breaks compat with 4.21 and moves stuff out of netlogon_creds_CredentialState_extra_info. It also prepares support for netr_ServerAuthenticateKerberos() Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2024-10-30libcli/auth: pass auth_{type,level} to schannel_check_creds_state()Stefan Metzmacher1-0/+2
This will make it easier to implement netr_ServerAuthenticateKerberos() later... BUG: https://bugzilla.samba.org/show_bug.cgi?id=15425 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
2024-10-30librpc/rpc: make use of creds->ex->client_sid in ↵Stefan Metzmacher1-2/+2
dcesrv_netr_check_schannel_get_state() creds->sid will be removed soon. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15425 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
2023-01-09CVE-2022-38023 s3:rpc_server/netlogon: Use dcesrv_netr_creds_server_step_check()Samuel Cabrero1-6/+0
After s3 and s4 rpc servers merge we can avoid duplicated code. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240 Signed-off-by: Samuel Cabrero <scabrero@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2023-01-09CVE-2022-38023 s4:rpc_server/netlogon: Move schannel and credentials check ↵Samuel Cabrero2-0/+630
functions to librpc Will be used later by s3 netlogon server. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240 Signed-off-by: Samuel Cabrero <scabrero@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
generated by cgit v1.2.3 (git 2.25.1) at 2026-06-10 12:42:51 +0000