-/*
+/*
Unix SMB/CIFS implementation.
Generic authentication types
Copyright (C) Andrew Bartlett 2001-2002
}
#ifdef DEVELOPER
-/**
+/**
* Return an error based on username
*
* This function allows the testing of obscure errors, as well as the generation
**/
static NTSTATUS check_name_to_ntstatus_security(const struct auth_context *auth_context,
- void *my_private_data,
+ void *my_private_data,
TALLOC_CTX *mem_ctx,
const struct auth_usersupplied_info *user_info,
struct auth_serversupplied_info **server_info)
-/*
+/*
Unix SMB/Netbios implementation.
Version 3.0
handle NLTMSSP, server side
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
-
+
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
-
+
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
}
/**
- * Return the challenge as determined by the authentication subsystem
+ * Return the challenge as determined by the authentication subsystem
* @return an 8 byte random challenge
*/
}
/**
- * NTLM2 authentication modifies the effective challenge,
+ * NTLM2 authentication modifies the effective challenge,
* @param challenge The new challenge value
*/
NTSTATUS auth3_set_challenge(struct auth4_context *auth4_context, const uint8_t *chal,
}
/**
- * Check the password on an NTLMSSP login.
+ * Check the password on an NTLMSSP login.
*
* Return the session keys used on the connection.
*/
-/*
+/*
Unix SMB/CIFS implementation.
Password and authentication handling
Copyright (C) Andrew Tridgell 1992-2000
* behaviour.
*/
-/*
+/*
* This hook is currently used by winbindd only, as all other NTLM
* logins go via the hooks provided by make_auth4_context_s4() below.
*
TALLOC_FREE(frame);
goto done;
}
-
+
nt_status = auth_context_set_challenge(auth4_context, auth_context->challenge.data, "auth_samba4");
if (!NT_STATUS_IS_OK(nt_status)) {
TALLOC_FREE(auth4_context);
-/*
+/*
Unix SMB/CIFS implementation.
Password and authentication handling
Copyright (C) Andrew Bartlett 2001
**/
static NTSTATUS check_unix_security(const struct auth_context *auth_context,
- void *my_private_data,
+ void *my_private_data,
TALLOC_CTX *mem_ctx,
const struct auth_usersupplied_info *user_info,
struct auth_serversupplied_info **server_info)
become_root();
pass = Get_Pwnam_alloc(talloc_tos(), user_info->mapped.account_name);
- /** @todo This call assumes a ASCII password, no charset transformation is
+ /** @todo This call assumes a ASCII password, no charset transformation is
done. We may need to revisit this **/
nt_status = pass_check(pass,
pass ? pass->pw_name : user_info->mapped.account_name,
-/*
+/*
Unix SMB/CIFS implementation.
Winbind authentication mechanism
/* Authenticate a user with a challenge/response */
static NTSTATUS check_winbind_security(const struct auth_context *auth_context,
- void *my_private_data,
+ void *my_private_data,
TALLOC_CTX *mem_ctx,
const struct auth_usersupplied_info *user_info,
struct auth_serversupplied_info **server_info)
DEBUG(10, ("Check auth for: [%s]\n", user_info->mapped.account_name));
if (!auth_context) {
- DEBUG(3,("Password for user %s cannot be checked because we have no auth_info to get the challenge from.\n",
+ DEBUG(3,("Password for user %s cannot be checked because we have no auth_info to get the challenge from.\n",
user_info->mapped.account_name));
return NT_STATUS_INVALID_PARAMETER;
- }
+ }
if (strequal(user_info->mapped.domain_name, get_global_sam_name())) {
DEBUG(3,("check_winbind_security: Not using winbind, requested domain [%s] was for this SAM.\n",
/****************************************************************************
CHECK if a username/password is OK
the function pointer fn() points to a function to call when a successful
-match is found and is used to update the encrypted password file
+match is found and is used to update the encrypted password file
return NT_STATUS_OK on correct match, appropriate error otherwise
****************************************************************************/
if ((!*password) && !lp_null_passwords())
return NT_STATUS_LOGON_FAILURE;
-#if defined(WITH_PAM)
+#if defined(WITH_PAM)
/*
- * If we're using PAM we want to short-circuit all the
+ * If we're using PAM we want to short-circuit all the
* checks below and dive straight into the PAM code.
*/
return NT_STATUS_OK;
}
-static struct security_token *init_local_nt_token(TALLOC_CTX *mem_ctx)
+static struct security_token *init_local_nt_token(TALLOC_CTX *mem_ctx)
{
/*
* We do not have a method to populate the claims into this