From 892599fb92b6158e86a3934c8f2045ee457f38e3 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Tue, 18 Mar 2003 12:01:47 +0000 Subject: Merge from HEAD: A much better SMB signing module, that allows for mulitple signing algorithms and correctly backs down from signing when the server cannot sign the reply. This also attempts to enable SMB signing on NTLMSSP connections, but I don't know what NTLMSSP flags to set yet. This would allow 'client use signing' to be set by default, for server compatability. (A seperate option value should be provided for mandetory signing, which would not back down). Andrew Bartlett (This used to be commit 1c87be7a3d127201a6ab78d22d17c971af16b86b) --- source3/include/ntlmssp.h | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) (limited to 'source3/include/ntlmssp.h') diff --git a/source3/include/ntlmssp.h b/source3/include/ntlmssp.h index 2fcefaaef35..f0278ffece8 100644 --- a/source3/include/ntlmssp.h +++ b/source3/include/ntlmssp.h @@ -110,6 +110,24 @@ typedef struct ntlmssp_client_state DATA_BLOB session_key; uint32 neg_flags; + + /* SMB Signing */ + + uint32 ntlmssp_seq_num; + + /* ntlmv2 */ + char cli_sign_const[16]; + char cli_seal_const[16]; + char srv_sign_const[16]; + char srv_seal_const[16]; + + unsigned char cli_sign_hash[258]; + unsigned char cli_seal_hash[258]; + unsigned char srv_sign_hash[258]; + unsigned char srv_seal_hash[258]; + + /* ntlmv1 */ + unsigned char ntlmssp_hash[258]; } NTLMSSP_CLIENT_STATE; -- cgit v1.2.1