diff options
| author | Gary Lockyer <gary@catalyst.net.nz> | 2017-07-10 07:48:08 +1200 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2017-07-24 23:29:23 +0200 |
| commit | efc335a03062740f51a6edd09d765a8b77e239c5 (patch) | |
| tree | 924d5a0b417185ea2b1f84a7f4613e5a7e84a725 /auth/auth_log.c | |
| parent | f3d3e6da5a42833b8de86e9b7c0aa1c56e1c4e80 (diff) | |
| download | samba-efc335a03062740f51a6edd09d765a8b77e239c5.tar.gz | |
source4 netlogon: Add authentication logging for ServerAuthenticate3
Log NETLOGON authentication activity by instrumenting the
netr_ServerAuthenticate3 processing.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=12865
Signed-off-by: Gary Lockyer <gary@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Diffstat (limited to 'auth/auth_log.c')
| -rw-r--r-- | auth/auth_log.c | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/auth/auth_log.c b/auth/auth_log.c index 9dbf8f210fc..d4c6c445bed 100644 --- a/auth/auth_log.c +++ b/auth/auth_log.c @@ -639,6 +639,18 @@ static const char* get_password_type(const struct auth_usersupplied_info *ui) if (ui->password_type != NULL) { password_type = ui->password_type; + } else if (ui->auth_description != NULL && + strncmp("ServerAuthenticate", ui->auth_description, 18) == 0) + { + if (ui->netlogon_trust_account.negotiate_flags + & NETLOGON_NEG_SUPPORTS_AES) { + password_type = "HMAC-SHA256"; + } else if (ui->netlogon_trust_account.negotiate_flags + & NETLOGON_NEG_STRONG_KEYS) { + password_type = "HMAC-MD5"; + } else { + password_type = "DES"; + } } else if (ui->password_state == AUTH_PASSWORD_RESPONSE && (ui->logon_parameters & MSV1_0_ALLOW_MSVCHAPV2) && ui->password.response.nt.length == 24) { |