delta/samba.git/libcli/auth, branch master git.samba.org: samba.git auth: Return status code if configuration prohibits NTLM 2023-05-16T23:29:32+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2022-05-19T04:45:55+00:00 2a8db072934f2b75b992b57c9133afba446b74f5 Currently, we rely on ‘stored_nt’ being NULL to give an NT_STATUS_WRONG_PASSWORD error. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Currently, we rely on ‘stored_nt’ being NULL to give an
NT_STATUS_WRONG_PASSWORD error.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
libcli:auth: Fix code spelling 2023-04-27T14:25:38+00:00 Andreas Schneider asn@samba.org 2023-04-27T13:53:25+00:00 adcc92f83594abc3ab98fd0f138cdc76d3d2560d Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> 
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
CVE-2022-37966 libcli/auth: let netlogon_creds_cli_warn_options() about "kerberos encryption types=legacy" 2022-12-13T13:07:29+00:00 Stefan Metzmacher metze@samba.org 2022-12-05T20:45:08+00:00 0248907e34945153ff2be62dc11d75c956a05932 BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
CVE-2022-38023 docs-xml/smbdotconf: change 'reject md5 servers' default to yes 2022-12-13T13:07:29+00:00 Stefan Metzmacher metze@samba.org 2022-11-24T17:22:23+00:00 1c6c1129905d0c7a60018e7bf0f17a0fd198a584 AES is supported by Windows >= 2008R2 and Samba >= 4.0 so there's no reason to allow md5 servers by default. Note the change in netlogon_creds_cli_context_global() is only cosmetic, but avoids confusion while reading the code. Check with: git show -U35 libcli/auth/netlogon_creds_cli.c BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
AES is supported by Windows >= 2008R2 and Samba >= 4.0 so there's no
reason to allow md5 servers by default.

Note the change in netlogon_creds_cli_context_global() is only cosmetic,
but avoids confusion while reading the code. Check with:

 git show -U35 libcli/auth/netlogon_creds_cli.c

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
CVE-2022-38023 libcli/auth: add/use netlogon_creds_cli_warn_options() 2022-12-13T13:07:29+00:00 Stefan Metzmacher metze@samba.org 2022-11-30T13:47:33+00:00 7e7adf86e59e8a673fbe87de46cef0d62221e800 This warns the admin about insecure options BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
This warns the admin about insecure options

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
CVE-2022-38023 libcli/auth: pass lp_ctx to netlogon_creds_cli_set_global_db() 2022-12-13T13:07:29+00:00 Stefan Metzmacher metze@samba.org 2022-11-30T13:46:59+00:00 992f39a2c8a58301ceeb965f401e29cd64c5a209 BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
s3:g_lock: add callback function to g_lock_lock_send() 2022-09-20T00:34:35+00:00 Stefan Metzmacher metze@samba.org 2022-08-28T10:38:24+00:00 37c9600ff1babbb3e1fc2db3d29dfb12ca0c707a BUG: https://bugzilla.samba.org/show_bug.cgi?id=15125 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15125

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
libcli/auth/proto.h: remove unneeded path details. 2022-09-16T05:46:36+00:00 Douglas Bagnall douglas.bagnall@catalyst.net.nz 2020-12-17T01:34:50+00:00 3119349a3f1973697980aff0a012dff92be3402a Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
libcli:auth: Keep passwords from convert_string_talloc() secret 2022-09-12T23:07:38+00:00 Joseph Sutton josephsutton@catalyst.net.nz 2022-08-02T02:35:50+00:00 6edf88f5c40421b9881666a2e78038ea9c547c24 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
libcli:auth: Add test for decode_pwd_string_from_buffer514() 2022-07-28T11:51:29+00:00 Andreas Schneider asn@samba.org 2022-07-25T10:12:52+00:00 63c4b16d2fce6f8f547cb99f9bc626668e6ad379 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> 
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>