From owner-cvs-src@FreeBSD.ORG Fri Jan 2 14:38:45 2004 Return-Path: Delivered-To: cvs-src@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 39B8F16A4CE; Fri, 2 Jan 2004 14:38:45 -0800 (PST) Received: from repoman.freebsd.org (repoman.freebsd.org [216.136.204.115]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2242543D5E; Fri, 2 Jan 2004 14:38:43 -0800 (PST) (envelope-from tjr@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.12.10/8.12.10) with ESMTP id i02Mcg0B017007; Fri, 2 Jan 2004 14:38:42 -0800 (PST) (envelope-from tjr@repoman.freebsd.org) Received: (from tjr@localhost) by repoman.freebsd.org (8.12.10/8.12.10/Submit) id i02Mcg4n017006; Fri, 2 Jan 2004 14:38:42 -0800 (PST) (envelope-from tjr) Message-Id: <200401022238.i02Mcg4n017006@repoman.freebsd.org> From: "Tim J. Robbins" Date: Fri, 2 Jan 2004 14:38:42 -0800 (PST) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/sys/netsmb smb_conn.c smb_conn.h smb_crypt.c smb_iod.c smb_rq.c smb_rq.h smb_smb.c smb_subr.h X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Jan 2004 22:38:45 -0000 tjr 2004/01/02 14:38:42 PST FreeBSD src repository Modified files: sys/netsmb smb_conn.c smb_conn.h smb_crypt.c smb_iod.c smb_rq.c smb_rq.h smb_smb.c smb_subr.h Log: Add support for SMB request signing, which prevents "man in the middle" attacks and is required to connect to Windows 2003 servers in their default configuration. This adds an extra field to the SMB header containing the truncated 64-bit MD5 digest of a key (a function of the user's password and the server's authentication challenge), an implicit sequence number, and the message data itself. As signing each message imposes a significant performance penalty, we only enable it if the server will not let us connect without it; this should eventually become an option to mount_smbfs. Revision Changes Path 1.10 +5 -0 src/sys/netsmb/smb_conn.c 1.10 +3 -0 src/sys/netsmb/smb_conn.h 1.7 +192 -1 src/sys/netsmb/smb_crypt.c 1.15 +2 -0 src/sys/netsmb/smb_iod.c 1.14 +20 -4 src/sys/netsmb/smb_rq.c 1.3 +5 -1 src/sys/netsmb/smb_rq.h 1.12 +19 -6 src/sys/netsmb/smb_smb.c 1.11 +3 -0 src/sys/netsmb/smb_subr.h