| blob | b9776097ecbbb722de72d3487946a4b6661ac2cc |
1 --- misc/neon-0.28.2/src/config.h 2009-06-24 12:49:38.000000000 +0200
2 +++ misc/build/neon-0.28.2/src/config.h 2009-06-24 12:46:45.000000000 +0200
3 @@ -1 +1,484 @@
4 -dummy
5 +
6 +/* Define to specific EGD socket path */
7 +/* #undef EGD_PATH */
8 +
9 +/* Define if EGD should be supported */
10 +/* #undef ENABLE_EGD */
11 +
12 +/* Define if GSS_C_NT_HOSTBASED_SERVICE is not defined otherwise */
13 +/* #undef GSS_C_NT_HOSTBASED_SERVICE */
14 +
15 +/* Define to 1 if you have the <arpa/inet.h> header file. */
16 +#ifdef UNX
17 +#define HAVE_ARPA_INET_H 1
18 +#endif
19 +
20 +/* Define to 1 if you have the `bind_textdomain_codeset' function. */
21 +/* #undef HAVE_BIND_TEXTDOMAIN_CODESET 1 */
22 +
23 +/* Define to 1 if you have the declaration of `h_errno', and to 0 if you
24 + don't. */
25 +#ifdef WIN32
26 +#define HAVE_DECL_H_ERRNO 1
27 +#endif
28 +
29 +/* Define to 1 if you have the declaration of `stpcpy', and to 0 if you don't.
30 + */
31 +#ifdef LINUX
32 +#define HAVE_DECL_STPCPY 1
33 +#endif
34 +
35 +/* Define to 1 if you have the declaration of `strerror_r', and to 0 if you
36 + don't. */
37 +#ifdef LINUX
38 +#define HAVE_DECL_STRERROR_R 1
39 +#endif
40 +
41 +/* Define to 1 if you have the <dlfcn.h> header file. */
42 +#ifdef UNX
43 +#define HAVE_DLFCN_H 1
44 +#endif
45 +
46 +/* Define to 1 if you have the <errno.h> header file. */
47 +#define HAVE_ERRNO_H 1
48 +
49 +/* Define if you have expat */
50 +/* #undef HAVE_EXPAT */
51 +
52 +/* Define to 1 if you have the `fstat64' function. */
53 +#define HAVE_FSTAT64
54 +
55 +/* Define to 1 if you have the `gai_strerror' function. */
56 +#define HAVE_GAI_STRERROR 1
57 +
58 +/* Define if GnuTLS support is enabled */
59 +/* #undef HAVE_GNUTLS */
60 +
61 +/* Define to 1 if you have the `gnutls_session_get_data2' function. */
62 +/* #undef HAVE_GNUTLS_SESSION_GET_DATA2 */
63 +
64 +/* Define if GSSAPI support is enabled */
65 +/* #undef HAVE_GSSAPI */
66 +
67 +/* Define to 1 if you have the <gssapi/gssapi_generic.h> header file. */
68 +/* #undef HAVE_GSSAPI_GSSAPI_GENERIC_H */
69 +
70 +/* Define to 1 if you have the <gssapi/gssapi.h> header file. */
71 +/* #undef HAVE_GSSAPI_GSSAPI_H */
72 +
73 +/* Define to 1 if you have the <gssapi.h> header file. */
74 +/* #undef HAVE_GSSAPI_H */
75 +
76 +/* Define to 1 if you have the `gss_init_sec_context' function. */
77 +/* #undef HAVE_GSS_INIT_SEC_CONTEXT */
78 +
79 +/* Define to 1 if you have the `hstrerror' function. */
80 +/* #undef HAVE_HSTRERROR */
81 +
82 +/* Define to 1 if you have the `inet_ntop' function. */
83 +#ifdef UNX
84 +#define HAVE_INET_NTOP 1
85 +#endif
86 +
87 +/* Define to 1 if you have the <inttypes.h> header file. */
88 +#ifdef UNX
89 +#define HAVE_INTTYPES_H 1
90 +#endif
91 +
92 +/* Define to 1 if you have the `isatty' function. */
93 +#define HAVE_ISATTY 1
94 +
95 +/* Define to 1 if you have the <libintl.h> header file. */
96 +/* #undef HAVE_LIBINTL_H */
97 +
98 +/* Define if you have libxml */
99 +#define HAVE_LIBXML 1
100 +
101 +/* Define to 1 if you have the <libxml/parser.h> header file. */
102 +#define HAVE_LIBXML_PARSER_H 1
103 +
104 +/* Define to 1 if you have the <libxml/xmlversion.h> header file. */
105 +#define HAVE_LIBXML_XMLVERSION_H 1
106 +
107 +/* Define to 1 if you have the <limits.h> header file. */
108 +#define HAVE_LIMITS_H 1
109 +
110 +/* Define to 1 if you have the <locale.h> header file. */
111 +#define HAVE_LOCALE_H 1
112 +
113 +/* Define to 1 if you have the `lseek64' function. */
114 +#define HAVE_LSEEK64 1
115 +
116 +/* Define to 1 if you have the <memory.h> header file. */
117 +#define HAVE_MEMORY_H 1
118 +
119 +/* Define to 1 if you have the <netdb.h> header file. */
120 +#ifdef UNX
121 +#define HAVE_NETDB_H 1
122 +#endif
123 +
124 +/* Define to 1 if you have the <netinet/in.h> header file. */
125 +#ifdef UNX
126 +#define HAVE_NETINET_IN_H 1
127 +#endif
128 +
129 +/* Define to 1 if you have the <netinet/tcp.h> header file. */
130 +#ifdef UNX
131 +#define HAVE_NETINET_TCP_H 1
132 +#endif
133 +
134 +/* Define if OpenSSL support is enabled */
135 +/* #undef HAVE_OPENSSL */
136 +#define HAVE_OPENSSL
137 +/* Define to 1 if you have the <openssl/opensslv.h> header file. */
138 +/* #undef HAVE_OPENSSL_OPENSSLV_H */
139 +#define HAVE_OPENSSL_OPENSSLV_H 1
140 +/* Define to 1 if you have the <openssl/ssl.h> header file. */
141 +/* #undef HAVE_OPENSSL_SSL_H */
142 +#define HAVE_OPENSSL_SSL_H 1
143 +/* Define to 1 if you have the `pipe' function. */
144 +#define HAVE_PIPE 1
145 +
146 +/* Define to 1 if you have the `poll' function. */
147 +#define HAVE_POLL 1
148 +
149 +/* Define to 1 if you have the `pthread_mutex_init' function. */
150 +/* #undef HAVE_PTHREAD_MUTEX_INIT */
151 +
152 +/* Define to 1 if you have the `pthread_mutex_lock' function. */
153 +/* #undef HAVE_PTHREAD_MUTEX_LOCK */
154 +
155 +/* Define to 1 if you have the `setlocale' function. */
156 +#define HAVE_SETLOCALE 1
157 +
158 +/* Define to 1 if you have the `setsockopt' function. */
159 +#if defined (LINUX) || defined (WIN32)
160 +#define HAVE_SETSOCKOPT 1
161 +#endif
162 +
163 +/* Define to 1 if you have the `setvbuf' function. */
164 +#define HAVE_SETVBUF 1
165 +
166 +/* Define to 1 if you have the `shutdown' function. */
167 +#ifdef LINUX
168 +#define HAVE_SHUTDOWN 1
169 +#endif
170 +
171 +/* Define to 1 if you have the `signal' function. */
172 +#define HAVE_SIGNAL 1
173 +
174 +/* Define to 1 if you have the <signal.h> header file. */
175 +#define HAVE_SIGNAL_H 1
176 +
177 +/* Define to 1 if you have the `snprintf' function. */
178 +#ifdef UNX
179 +#define HAVE_SNPRINTF 1
180 +#endif
181 +
182 +#ifdef WIN32
183 +#define snprintf _snprintf
184 +#endif
185 +
186 +/* Define to 1 if you have the <socks.h> header file. */
187 +/* #undef HAVE_SOCKS_H */
188 +
189 +/* Define to 1 if you have the <stdarg.h> header file. */
190 +#define HAVE_STDARG_H 1
191 +
192 +/* Define to 1 if you have the <stdint.h> header file. */
193 +#define HAVE_STDINT_H 1
194 +
195 +/* Define to 1 if you have the <stdlib.h> header file. */
196 +#define HAVE_STDLIB_H 1
197 +
198 +/* Define to 1 if you have the `stpcpy' function. */
199 +#ifdef LINUX
200 +#define HAVE_STPCPY 1
201 +#endif
202 +
203 +/* Define to 1 if you have the `strcasecmp' function. */
204 +#ifdef UNX
205 +#define HAVE_STRCASECMP 1
206 +#endif
207 +
208 +#ifdef WIN32
209 +#define strcasecmp strcmpi
210 +#endif
211 +
212 +/* Define to 1 if you have the `strerror_r' function. */
213 +#ifdef LINUX
214 +#define HAVE_STRERROR_R 1
215 +#endif
216 +
217 +/* Define to 1 if you have the <strings.h> header file. */
218 +#ifdef UNX
219 +#define HAVE_STRINGS_H 1
220 +#endif
221 +
222 +/* Define to 1 if you have the <string.h> header file. */
223 +#define HAVE_STRING_H 1
224 +
225 +/* Define to 1 if you have the `strtoll' function. */
226 +#define HAVE_STRTOLL 1
227 +
228 +/* Define to 1 if you have the `strtoq' function. */
229 +/* #undef HAVE_STRTOQ */
230 +
231 +/* Define to 1 if `tm_gmtoff' is member of `struct tm'. */
232 +#ifdef LINUX
233 +#define HAVE_STRUCT_TM_TM_GMTOFF 1
234 +#endif
235 +
236 +/* Define to 1 if `__tm_gmtoff' is member of `struct tm'. */
237 +/* #undef HAVE_STRUCT_TM___TM_GMTOFF */
238 +
239 +/* Define to 1 if you have the <sys/limits.h> header file. */
240 +/* #undef HAVE_SYS_LIMITS_H */
241 +
242 +/* Define to 1 if you have the <sys/poll.h> header file. */
243 +#ifdef UNX
244 +#define HAVE_SYS_POLL_H 1
245 +#endif
246 +
247 +/* Define to 1 if you have the <sys/select.h> header file. */
248 +#ifdef UNX
249 +#define HAVE_SYS_SELECT_H 1
250 +#endif
251 +
252 +/* Define to 1 if you have the <sys/socket.h> header file. */
253 +#ifdef UNX
254 +#define HAVE_SYS_SOCKET_H 1
255 +#endif
256 +
257 +/* Define to 1 if you have the <sys/stat.h> header file. */
258 +#define HAVE_SYS_STAT_H 1
259 +
260 +/* Define to 1 if you have the <sys/time.h> header file. */
261 +#ifdef UNX
262 +#define HAVE_SYS_TIME_H 1
263 +#endif
264 +
265 +/* Define to 1 if you have the <sys/types.h> header file. */
266 +#define HAVE_SYS_TYPES_H 1
267 +
268 +/* Define if the timezone global is available */
269 +#ifndef MACOSX
270 +#define HAVE_TIMEZONE 1
271 +#endif
272 +
273 +/* Use trio printf replacement library */
274 +/* #undef HAVE_TRIO */
275 +
276 +/* Define to 1 if you have the <trio.h> header file. */
277 +/* #undef HAVE_TRIO_H */
278 +
279 +/* Define to 1 if you have the <unistd.h> header file. */
280 +#ifdef UNX
281 +#define HAVE_UNISTD_H 1
282 +#endif
283 +
284 +/* Define to 1 if you have the `usleep' function. */
285 +#ifdef UNX
286 +#define HAVE_USLEEP 1
287 +#endif
288 +
289 +/* Define to 1 if you have the `vsnprintf' function. */
290 +#if defined( UNX ) || (defined(_MSC_VER) && (_MSC_VER > 1400))
291 +#define HAVE_VSNPRINTF 1
292 +#endif
293 +
294 +#ifdef WIN32
295 +#if (defined(_MSC_VER) && (_MSC_VER < 1500)) || defined(__MINGW32__)
296 +#define vsnprintf _vsnprintf
297 +#endif
298 +#endif
299 +
300 +/* Define to be location of localedir */
301 +/* #undef LOCALEDIR */
302 +
303 +/* Defined when neon is built as a library */
304 +#define NEON_IS_LIBRARY 1
305 +
306 +/* Define to be the neon version string */
307 +#define NEON_VERSION "0.28.2"
308 +
309 +/* Define to enable debugging */
310 +/* #undef NE_DEBUGGING */
311 +
312 +/* Define to be printf format string for off64_t */
313 +#define NE_FMT_OFF64_T "lld"
314 +
315 +/* Define to be printf format string for off_t */
316 +#define NE_FMT_OFF_T "ld"
317 +
318 +/* Define to be printf format string for size_t */
319 +#define NE_FMT_SIZE_T "u"
320 +
321 +/* Define to be printf format string for ssize_t */
322 +#define NE_FMT_SSIZE_T "d"
323 +
324 +/* Define to be printf format string for time_t */
325 +#define NE_FMT_TIME_T "ld"
326 +
327 +/* Defined if DAV is supported */
328 +#define NE_HAVE_DAV 1
329 +
330 +/* Defined if I18N is supported */
331 +/* #undef NE_HAVE_I18N 1 */
332 +
333 +/* Defined if IPV6 is supported */
334 +#define NE_HAVE_IPV6 1
335 +
336 +/* Defined if LFS is supported */
337 +#define NE_HAVE_LFS 1
338 +
339 +/* Defined if SOCKS is supported */
340 +/* #undef NE_HAVE_SOCKS */
341 +
342 +/* Defined if SSL is supported */
343 +/* #undef NE_HAVE_SSL */
344 +#define NE_HAVE_SSL
345 +/* Defined if TS_SSL is supported */
346 +/* #undef NE_HAVE_TS_SSL */
347 +
348 +/* Defined if ZLIB is supported */
349 +/* #undef NE_HAVE_ZLIB */
350 +
351 +/* Define to be filename of an SSL CA root bundle */
352 +/* #undef NE_SSL_CA_BUNDLE */
353 +
354 +/* Define if poll() should be used */
355 +#ifdef UNX
356 +#define NE_USE_POLL 1
357 +#endif
358 +
359 +/* Define to be neon library major version */
360 +#define NE_VERSION_MAJOR (0)
361 +
362 +/* Define to be neon library minor version */
363 +#define NE_VERSION_MINOR (28)
364 +
365 +/* Define to be neon library patch version */
366 +#define NE_VERSION_PATCH (2)
367 +
368 +/* Define to the address where bug reports for this package should be sent. */
369 +#define PACKAGE_BUGREPORT "neon@webdav.org"
370 +
371 +/* Define to the full name of this package. */
372 +#define PACKAGE_NAME "neon"
373 +
374 +/* Define to the full name and version of this package. */
375 +#define PACKAGE_STRING "neon 0.28.2"
376 +
377 +/* Define to the one symbol short name of this package. */
378 +#define PACKAGE_TARNAME "neon"
379 +
380 +/* Define to the version of this package. */
381 +#define PACKAGE_VERSION "0.28.2"
382 +
383 +/* The size of a `int', as computed by sizeof. */
384 +#define SIZEOF_INT 4
385 +
386 +/* The size of a `long', as computed by sizeof. */
387 +#define SIZEOF_LONG 4
388 +
389 +/* The size of a `long long', as computed by sizeof. */
390 +#define SIZEOF_LONG_LONG 8
391 +
392 +/* The size of a `off64_t', as computed by sizeof. */
393 +#define SIZEOF_OFF64_T 8
394 +
395 +/* The size of a `off_t', as computed by sizeof. */
396 +#define SIZEOF_OFF_T 4
397 +
398 +/* The size of a `size_t', as computed by sizeof. */
399 +#define SIZEOF_SIZE_T 4
400 +
401 +/* The size of a `ssize_t', as computed by sizeof. */
402 +#define SIZEOF_SSIZE_T 4
403 +
404 +/* The size of a `time_t', as computed by sizeof. */
405 +#define SIZEOF_TIME_T 4
406 +
407 +/* Define to 1 if you have the ANSI C header files. */
408 +#ifdef SOLARIS
409 +#define STDC_HEADERS 1
410 +#endif
411 +
412 +/* Define to 1 if strerror_r returns char *. */
413 +#ifdef LINUX
414 +#define STRERROR_R_CHAR_P 1
415 +#endif
416 +
417 +/* Define to 1 if you can safely include both <sys/time.h> and <time.h>. */
418 +#define TIME_WITH_SYS_TIME 1
419 +
420 +/* Define if getaddrinfo supports AI_ADDRCONFIG */
421 +/* #undef USE_GAI_ADDRCONFIG */
422 +
423 +/* Define if getaddrinfo() should be used */
424 +#define USE_GETADDRINFO 1
425 +
426 +/* Define to 1 if your processor stores words with the most significant byte
427 + first (like Motorola and SPARC, unlike Intel and VAX). */
428 +#if defined (SOLARIS) && defined (SPARC)
429 +#define WORDS_BIGENDIAN 1
430 +#endif
431 +
432 +/* Always defined to enable GNU extensions */
433 +#define _GNU_SOURCE 1
434 +
435 +/* Define to empty if `const' does not conform to ANSI C. */
436 +/* #undef const */
437 +
438 +/* Define if in_addr_t is not available */
439 +/* #undef in_addr_t */
440 +
441 +/* Define to `__inline__' or `__inline' if that's what the C compiler
442 + calls it, or to nothing if 'inline' is not supported under any name. */
443 +#ifndef __cplusplus
444 +#if defined (SOLARIS) && defined (__SUNPRO_C)
445 +#define inline
446 +#endif
447 +#endif
448 +
449 +/* Define to `long' if <sys/types.h> does not define. */
450 +/* #undef off_t */
451 +
452 +/* Define to `int' if <sys/types.h> does not define. */
453 +/* #undef pid_t */
454 +
455 +/* Define to `unsigned' if <sys/types.h> does not define. */
456 +/* #undef size_t */
457 +
458 +
459 +/* Enable leak-tracking versions of ne_*alloc when NEON_MEMLEAK is enabled */
460 +#ifdef NEON_MEMLEAK
461 +# include "memleak.h"
462 +#endif
463 +
464 +#if defined(HAVE_STPCPY) && defined(HAVE_DECL_STPCPY) && !HAVE_DECL_STPCPY && !defined(stpcpy)
465 +char *stpcpy(char *, const char *);
466 +#endif
467 +
468 +#ifdef WIN32
469 +
470 +#include <io.h>
471 +
472 +#define HAVE_MEMCPY 1
473 +
474 +#define strncasecmp strnicmp
475 +#define inline __inline
476 +#define WIN32_LEAN_AND_MEAN
477 +#define NOUSER
478 +#define NOGDI
479 +#define NONLS
480 +#define NOCRYPT
481 +
482 +#endif
483 +
484 +#ifdef WIN32
485 +#define HAVE_SSPI 1
486 +#else
487 +#define HAVE_NTLM 1
488 +#endif
489 --- misc/neon-0.28.2/src/makefile.mk 2009-06-24 12:49:38.000000000 +0200
490 +++ misc/build/neon-0.28.2/src/makefile.mk 2009-06-24 12:46:45.000000000 +0200
491 @@ -1 +1,59 @@
492 -dummy
493 +PRJ=..$/..$/..$/..$/..
494 +
495 +PRJNAME=neon
496 +TARGET=neon
497 +LIBTARGET=NO
498 +EXTERNAL_WARNINGS_NOT_ERRORS := TRUE
499 +
500 +# --- Settings -----------------------------------------------------
501 +
502 +.INCLUDE : settings.mk
503 +
504 +# --- Files --------------------------------------------------------
505 +
506 +CDEFS+=-DHAVE_CONFIG_H
507 +
508 +.IF "$(SYSTEM_LIBXML)" == "YES"
509 +CFLAGS+=-DSYSTEM_LIBXML $(LIBXML_CFLAGS)
510 +.ENDIF
511 +
512 +
513 +SLOFILES= \
514 + $(SLO)$/ne_207.obj \
515 + $(SLO)$/ne_acl.obj \
516 + $(SLO)$/ne_alloc.obj \
517 + $(SLO)$/ne_auth.obj \
518 + $(SLO)$/ne_basic.obj \
519 + $(SLO)$/ne_compress.obj \
520 + $(SLO)$/ne_dates.obj \
521 + $(SLO)$/ne_i18n.obj \
522 + $(SLO)$/ne_locks.obj \
523 + $(SLO)$/ne_md5.obj \
524 + $(SLO)$/ne_props.obj \
525 + $(SLO)$/ne_redirect.obj \
526 + $(SLO)$/ne_request.obj \
527 + $(SLO)$/ne_session.obj \
528 + $(SLO)$/ne_socket.obj \
529 + $(SLO)$/ne_string.obj \
530 + $(SLO)$/ne_uri.obj \
531 + $(SLO)$/ne_utils.obj \
532 + $(SLO)$/ne_xml.obj \
533 + $(SLO)$/ne_xmlreq.obj \
534 + $(SLO)$/ne_openssl.obj
535 +
536 +.IF "$(OS)"=="WNT"
537 +SLOFILES+=$(SLO)$/ne_sspi.obj
538 +.ELSE
539 +SLOFILES+=$(SLO)$/ne_ntlm.obj
540 +.ENDIF
541 +
542 +# $(SLO)$/ne_gnutls.obj \
543 +# $(SLO)$/ne_stubssl.obj
544 +
545 +LIB1TARGET=$(SLB)$/$(TARGET).lib
546 +LIB1ARCHIV=$(LB)$/lib$(TARGET).a
547 +LIB1OBJFILES=$(SLOFILES)
548 +
549 +# --- Targets ------------------------------------------------------
550 +
551 +.INCLUDE : target.mk
552 --- misc/neon-0.28.2/src/ne_auth.c 2008-02-29 17:30:12.000000000 +0100
553 +++ misc/build/neon-0.28.2/src/ne_auth.c 2009-06-24 12:46:45.000000000 +0200
554 @@ -77,6 +77,10 @@
555 #include "ne_sspi.h"
556 #endif
558 +#ifdef HAVE_NTLM
559 +#include "ne_ntlm.h"
560 +#endif
561 +
562 #define HOOK_SERVER_ID "http://webdav.org/neon/hooks/server-auth"
563 #define HOOK_PROXY_ID "http://webdav.org/neon/hooks/proxy-auth"
565 @@ -173,6 +177,10 @@
566 char *sspi_token;
567 void *sspi_context;
568 #endif
569 +#ifdef HAVE_NTLM
570 + /* This is used for NTLM auth */
571 + ne_ntlm_context *ntlm_context;
572 +#endif
573 /* These all used for Digest auth */
574 char *realm;
575 char *nonce;
576 @@ -287,6 +295,11 @@
577 ne_sspi_destroy_context(sess->sspi_context);
578 sess->sspi_context = NULL;
579 #endif
580 +#ifdef HAVE_NTLM
581 + ne_ntlm_destroy_context(sess->ntlm_context);
582 + sess->ntlm_context = NULL;
583 +#endif
584 + sess->protocol = NULL;
585 }
587 /* Returns client nonce string. */
588 @@ -598,9 +611,10 @@
589 int ntlm = ne_strcasecmp(parms->protocol->name, "NTLM") == 0;
590 int status;
591 char *response = NULL;
592 -
593 + char password[NE_ABUFSIZ];
594 +
595 NE_DEBUG(NE_DBG_HTTPAUTH, "auth: SSPI challenge.\n");
596 -
597 +
598 if (!sess->sspi_context) {
599 ne_uri uri = {0};
601 @@ -614,8 +628,17 @@
602 return status;
603 }
604 }
605 +
606 + /* Authentification needs more than one http request.
607 + * As long as authentification in progress use the existing credentials.
608 + * Otherwise get new credentials.*/
609 + if (!parms->opaque)
610 + if (get_credentials(sess, errmsg, attempt, parms, password)) {
611 + /* Failed to get credentials */
612 + return -1;
613 + }
615 - status = ne_sspi_authenticate(sess->sspi_context, parms->opaque, &response);
616 + status = ne_sspi_authenticate(sess->sspi_context, parms->opaque, &response, sess->username, password);
617 if (status) {
618 return status;
619 }
620 @@ -685,6 +708,62 @@
621 return invalid;
622 }
624 +#ifdef HAVE_NTLM
625 +
626 +static char *request_ntlm(auth_session *sess, struct auth_request *request)
627 +{
628 + char *token = ne_ntlm_getRequestToken(sess->ntlm_context);
629 + if (token) {
630 + char * req = ne_concat(sess->protocol->name, " ", token, "\r\n", NULL);
631 + ne_free(token);
632 + return req;
633 + } else {
634 + return NULL;
635 + }
636 +}
637 +
638 +static int ntlm_challenge(auth_session *sess, int attempt,
639 + struct auth_challenge *parms,
640 + ne_buffer **errmsg)
641 +{
642 + int status;
643 +
644 + NE_DEBUG(NE_DBG_HTTPAUTH, "auth: NTLM challenge.\n");
645 +
646 + if (!parms->opaque) {
647 + char password[NE_ABUFSIZ];
648 +
649 + if (get_credentials(sess, errmsg, attempt, parms, password)) {
650 + /* Failed to get credentials */
651 + return -1;
652 + }
653 +
654 + if (sess->ntlm_context) {
655 + status = ne_ntlm_destroy_context(sess->ntlm_context);
656 + sess->ntlm_context = NULL;
657 + if (status) {
658 + return status;
659 + }
660 + }
661 +
662 + status = ne_ntlm_create_context(&sess->ntlm_context,
663 + sess->username,
664 + password);
665 + if (status) {
666 + return status;
667 + }
668 + }
669 +
670 + status = ne_ntlm_authenticate(sess->ntlm_context, parms->opaque);
671 + if (status) {
672 + return status;
673 + }
674 +
675 + return 0;
676 +}
677 +#endif /* HAVE_NTLM */
678 +
679 +
680 /* Examine a digest challenge: return 0 if it is a valid Digest challenge,
681 * else non-zero. */
682 static int digest_challenge(auth_session *sess, int attempt,
683 @@ -1134,6 +1213,11 @@
684 sspi_challenge, request_sspi, NULL,
685 AUTH_FLAG_OPAQUE_PARAM|AUTH_FLAG_VERIFY_NON40x|AUTH_FLAG_CONN_AUTH },
686 #endif
687 +#ifdef HAVE_NTLM
688 + { NE_AUTH_NEGOTIATE, 30, "NTLM",
689 + ntlm_challenge, request_ntlm, NULL,
690 + AUTH_FLAG_OPAQUE_PARAM|AUTH_FLAG_VERIFY_NON40x|AUTH_FLAG_CONN_AUTH },
691 +#endif
692 { 0 }
693 };
695 @@ -1431,6 +1515,11 @@
696 ne_sspi_clear_context(sess->sspi_context);
697 }
698 #endif
699 +#ifdef HAVE_NTLM
700 + if (sess->ntlm_context) {
701 + ne_ntlm_clear_context(sess->ntlm_context);
702 + }
703 +#endif
705 return ret;
706 }
707 --- misc/neon-0.28.2/src/ne_defs.h 2006-10-24 21:40:09.000000000 +0200
708 +++ misc/build/neon-0.28.2/src/ne_defs.h 2009-06-24 12:46:45.000000000 +0200
709 @@ -41,7 +41,7 @@
710 #endif
712 /* define ssize_t for Win32 */
713 -#if defined(WIN32) && !defined(ssize_t)
714 +#if defined(WIN32) && !defined(ssize_t) && !defined(__MINGW32__)
715 #define ssize_t int
716 #endif
718 --- misc/neon-0.28.2/src/ne_locks.h 2006-01-02 12:43:19.000000000 +0100
719 +++ misc/build/neon-0.28.2/src/ne_locks.h 2009-06-24 12:46:45.000000000 +0200
720 @@ -22,6 +22,10 @@
721 #ifndef NE_LOCKS_H
722 #define NE_LOCKS_H
724 +# if defined __GNUC__
725 +# pragma GCC system_header
726 +# endif
727 +
728 #include "ne_request.h" /* for ne_session + ne_request */
729 #include "ne_uri.h" /* for ne_uri */
731 --- misc/neon-0.28.2/src/ne_ntlm.c 2009-06-24 12:49:38.000000000 +0200
732 +++ misc/build/neon-0.28.2/src/ne_ntlm.c 2009-06-24 12:46:45.000000000 +0200
733 @@ -1 +1,700 @@
734 -dummy
735 +/*
736 + Handling of NTLM Authentication
737 + Copyright (C) 2003, Daniel Stenberg <daniel@haxx.se>
738 + Copyright (C) 2009, Kai Sommerfeld <kso@openoffice.org>
739 +
740 + This library is free software; you can redistribute it and/or
741 + modify it under the terms of the GNU Library General Public
742 + License as published by the Free Software Foundation; either
743 + version 2 of the License, or (at your option) any later version.
744 +
745 + This library is distributed in the hope that it will be useful,
746 + but WITHOUT ANY WARRANTY; without even the implied warranty of
747 + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
748 + Library General Public License for more details.
749 +
750 + You should have received a copy of the GNU Library General Public
751 + License along with this library; if not, write to the Free
752 + Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
753 + MA 02111-1307, USA
754 +
755 +*/
756 +
757 +/* NTLM details:
758 +
759 + http://davenport.sourceforge.net/ntlm.html
760 + http://www.innovation.ch/java/ntlm.html
761 +
762 +*/
763 +
764 +#include "ne_ntlm.h"
765 +
766 +#ifdef HAVE_NTLM
767 +
768 +#include "ne_string.h"
769 +
770 +typedef enum {
771 + NTLMSTATE_NONE,
772 + NTLMSTATE_TYPE1,
773 + NTLMSTATE_TYPE2,
774 + NTLMSTATE_TYPE3,
775 + NTLMSTATE_LAST
776 +} NTLMState;
777 +
778 +struct ne_ntlm_context_s {
779 + NTLMState state;
780 + unsigned char nonce[8];
781 + char *user;
782 + char *passwd;
783 + char *requestToken;
784 +};
785 +
786 +typedef enum {
787 + NTLM_NONE, /* not a ntlm */
788 + NTLM_BAD, /* an ntlm, but one we don't like */
789 + NTLM_FIRST, /* the first 401-reply we got with NTLM */
790 + NTLM_FINE, /* an ntlm we act on */
791 +
792 + NTLM_LAST /* last entry in this enum, don't use */
793 +} ntlm;
794 +
795 +/* Flag bits definitions based on http://davenport.sourceforge.net/ntlm.html */
796 +
797 +#define NTLMFLAG_NEGOTIATE_UNICODE (1<<0)
798 +/* Indicates that Unicode strings are supported for use in security buffer
799 + data. */
800 +
801 +#define NTLMFLAG_NEGOTIATE_OEM (1<<1)
802 +/* Indicates that OEM strings are supported for use in security buffer data. */
803 +
804 +#define NTLMFLAG_REQUEST_TARGET (1<<2)
805 +/* Requests that the server's authentication realm be included in the Type 2
806 + message. */
807 +
808 +/* unknown (1<<3) */
809 +#define NTLMFLAG_NEGOTIATE_SIGN (1<<4)
810 +/* Specifies that authenticated communication between the client and server
811 + should carry a digital signature (message integrity). */
812 +
813 +#define NTLMFLAG_NEGOTIATE_SEAL (1<<5)
814 +/* Specifies that authenticated communication between the client and server
815 + should be encrypted (message confidentiality). */
816 +
817 +#define NTLMFLAG_NEGOTIATE_DATAGRAM_STYLE (1<<6)
818 +/* unknown purpose */
819 +
820 +#define NTLMFLAG_NEGOTIATE_LM_KEY (1<<7)
821 +/* Indicates that the LAN Manager session key should be used for signing and
822 + sealing authenticated communications. */
823 +
824 +#define NTLMFLAG_NEGOTIATE_NETWARE (1<<8)
825 +/* unknown purpose */
826 +
827 +#define NTLMFLAG_NEGOTIATE_NTLM_KEY (1<<9)
828 +/* Indicates that NTLM authentication is being used. */
829 +
830 +/* unknown (1<<10) */
831 +/* unknown (1<<11) */
832 +
833 +#define NTLMFLAG_NEGOTIATE_DOMAIN_SUPPLIED (1<<12)
834 +/* Sent by the client in the Type 1 message to indicate that a desired
835 + authentication realm is included in the message. */
836 +
837 +#define NTLMFLAG_NEGOTIATE_WORKSTATION_SUPPLIED (1<<13)
838 +/* Sent by the client in the Type 1 message to indicate that the client
839 + workstation's name is included in the message. */
840 +
841 +#define NTLMFLAG_NEGOTIATE_LOCAL_CALL (1<<14)
842 +/* Sent by the server to indicate that the server and client are on the same
843 + machine. Implies that the client may use a pre-established local security
844 + context rather than responding to the challenge. */
845 +
846 +#define NTLMFLAG_NEGOTIATE_ALWAYS_SIGN (1<<15)
847 +/* Indicates that authenticated communication between the client and server
848 + should be signed with a "dummy" signature. */
849 +
850 +#define NTLMFLAG_TARGET_TYPE_DOMAIN (1<<16)
851 +/* Sent by the server in the Type 2 message to indicate that the target
852 + authentication realm is a domain. */
853 +
854 +#define NTLMFLAG_TARGET_TYPE_SERVER (1<<17)
855 +/* Sent by the server in the Type 2 message to indicate that the target
856 + authentication realm is a server. */
857 +
858 +#define NTLMFLAG_TARGET_TYPE_SHARE (1<<18)
859 +/* Sent by the server in the Type 2 message to indicate that the target
860 + authentication realm is a share. Presumably, this is for share-level
861 + authentication. Usage is unclear. */
862 +
863 +#define NTLMFLAG_NEGOTIATE_NTLM2_KEY (1<<19)
864 +/* Indicates that the NTLM2 signing and sealing scheme should be used for
865 + protecting authenticated communications. */
866 +
867 +#define NTLMFLAG_REQUEST_INIT_RESPONSE (1<<20)
868 +/* unknown purpose */
869 +
870 +#define NTLMFLAG_REQUEST_ACCEPT_RESPONSE (1<<21)
871 +/* unknown purpose */
872 +
873 +#define NTLMFLAG_REQUEST_NONNT_SESSION_KEY (1<<22)
874 +/* unknown purpose */
875 +
876 +#define NTLMFLAG_NEGOTIATE_TARGET_INFO (1<<23)
877 +/* Sent by the server in the Type 2 message to indicate that it is including a
878 + Target Information block in the message. */
879 +
880 +/* unknown (1<24) */
881 +/* unknown (1<25) */
882 +/* unknown (1<26) */
883 +/* unknown (1<27) */
884 +/* unknown (1<28) */
885 +
886 +#define NTLMFLAG_NEGOTIATE_128 (1<<29)
887 +/* Indicates that 128-bit encryption is supported. */
888 +
889 +#define NTLMFLAG_NEGOTIATE_KEY_EXCHANGE (1<<30)
890 +/* unknown purpose */
891 +
892 +#define NTLMFLAG_NEGOTIATE_56 (1<<31)
893 +/* Indicates that 56-bit encryption is supported. */
894 +
895 +#ifdef HAVE_OPENSSL
896 +/* We need OpenSSL for the crypto lib to provide us with MD4 and DES */
897 +
898 +/* -- WIN32 approved -- */
899 +#include <stdio.h>
900 +#include <string.h>
901 +#include <stdarg.h>
902 +#include <stdlib.h>
903 +#include <ctype.h>
904 +
905 +#include <openssl/des.h>
906 +#include <openssl/md4.h>
907 +#include <openssl/ssl.h>
908 +
909 +#if OPENSSL_VERSION_NUMBER < 0x00907001L
910 +#define DES_key_schedule des_key_schedule
911 +#define DES_cblock des_cblock
912 +#define DES_set_odd_parity des_set_odd_parity
913 +#define DES_set_key des_set_key
914 +#define DES_ecb_encrypt des_ecb_encrypt
915 +
916 +/* This is how things were done in the old days */
917 +#define DESKEY(x) x
918 +#define DESKEYARG(x) x
919 +#else
920 +/* Modern version */
921 +#define DESKEYARG(x) *x
922 +#define DESKEY(x) &x
923 +#endif
924 +
925 +/* Define this to make the type-3 message include the NT response message */
926 +#define USE_NTRESPONSES 1
927 +
928 +/*
929 + (*) = A "security buffer" is a triplet consisting of two shorts and one
930 + long:
931 +
932 + 1. a 'short' containing the length of the buffer in bytes
933 + 2. a 'short' containing the allocated space for the buffer in bytes
934 + 3. a 'long' containing the offset to the start of the buffer from the
935 + beginning of the NTLM message, in bytes.
936 +*/
937 +
938 +static ntlm ne_input_ntlm(ne_ntlm_context *ctx,
939 + const char *responseToken)
940 +{
941 + if(responseToken) {
942 + /* We got a type-2 message here:
943 +
944 + Index Description Content
945 + 0 NTLMSSP Signature Null-terminated ASCII "NTLMSSP"
946 + (0x4e544c4d53535000)
947 + 8 NTLM Message Type long (0x02000000)
948 + 12 Target Name security buffer(*)
949 + 20 Flags long
950 + 24 Challenge 8 bytes
951 + (32) Context (optional) 8 bytes (two consecutive longs)
952 + (40) Target Information (optional) security buffer(*)
953 + 32 (48) start of data block
954 + */
955 + unsigned char * buffer = NULL;
956 +
957 + int size = ne_unbase64(responseToken, &buffer);
958 +
959 + ctx->state = NTLMSTATE_TYPE2; /* we got a type-2 */
960 +
961 + if(size >= 48)
962 + /* the nonce of interest is index [24 .. 31], 8 bytes */
963 + memcpy(ctx->nonce, &buffer[24], 8);
964 +
965 + /* at index decimal 20, there's a 32bit NTLM flag field */
966 +
967 + if (buffer) ne_free(buffer);
968 + }
969 + else {
970 + if(ctx->state >= NTLMSTATE_TYPE1)
971 + return NTLM_BAD;
972 +
973 + ctx->state = NTLMSTATE_TYPE1; /* we should sent away a type-1 */
974 + }
975 + return NTLM_FINE;
976 +}
977 +
978 +/*
979 + * Turns a 56 bit key into the 64 bit, odd parity key and sets the key. The
980 + * key schedule ks is also set.
981 + */
982 +static void setup_des_key(unsigned char *key_56,
983 + DES_key_schedule DESKEYARG(ks))
984 +{
985 + DES_cblock key;
986 +
987 + key[0] = key_56[0];
988 + key[1] = ((key_56[0] << 7) & 0xFF) | (key_56[1] >> 1);
989 + key[2] = ((key_56[1] << 6) & 0xFF) | (key_56[2] >> 2);
990 + key[3] = ((key_56[2] << 5) & 0xFF) | (key_56[3] >> 3);
991 + key[4] = ((key_56[3] << 4) & 0xFF) | (key_56[4] >> 4);
992 + key[5] = ((key_56[4] << 3) & 0xFF) | (key_56[5] >> 5);
993 + key[6] = ((key_56[5] << 2) & 0xFF) | (key_56[6] >> 6);
994 + key[7] = (key_56[6] << 1) & 0xFF;
995 +
996 + DES_set_odd_parity(&key);
997 + DES_set_key(&key, ks);
998 +}
999 +
1000 + /*
1001 + * takes a 21 byte array and treats it as 3 56-bit DES keys. The
1002 + * 8 byte plaintext is encrypted with each key and the resulting 24
1003 + * bytes are stored in the results array.
1004 + */
1005 +static void calc_resp(unsigned char *keys,
1006 + unsigned char *plaintext,
1007 + unsigned char *results)
1008 +{
1009 + DES_key_schedule ks;
1010 +
1011 + setup_des_key(keys, DESKEY(ks));
1012 + DES_ecb_encrypt((DES_cblock*) plaintext, (DES_cblock*) results,
1013 + DESKEY(ks), DES_ENCRYPT);
1014 +
1015 + setup_des_key(keys+7, DESKEY(ks));
1016 + DES_ecb_encrypt((DES_cblock*) plaintext, (DES_cblock*) (results+8),
1017 + DESKEY(ks), DES_ENCRYPT);
1018 +
1019 + setup_des_key(keys+14, DESKEY(ks));
1020 + DES_ecb_encrypt((DES_cblock*) plaintext, (DES_cblock*) (results+16),
1021 + DESKEY(ks), DES_ENCRYPT);
1022 +}
1023 +
1024 +/*
1025 + * Set up lanmanager and nt hashed passwords
1026 + */
1027 +static void mkhash(char *password,
1028 + unsigned char *nonce, /* 8 bytes */
1029 + unsigned char *lmresp /* must fit 0x18 bytes */
1030 +#ifdef USE_NTRESPONSES
1031 + , unsigned char *ntresp /* must fit 0x18 bytes */
1032 +#endif
1033 + )
1034 +{
1035 + unsigned char lmbuffer[21];
1036 +#ifdef USE_NTRESPONSES
1037 + unsigned char ntbuffer[21];
1038 +#endif
1039 + unsigned char *pw;
1040 + static const unsigned char magic[] = {
1041 + 0x4B, 0x47, 0x53, 0x21, 0x40, 0x23, 0x24, 0x25
1042 + };
1043 + int i;
1044 + int len = strlen(password);
1045 +
1046 + /* make it fit at least 14 bytes */
1047 + pw = malloc(len<7?14:len*2);
1048 + if(!pw)
1049 + return; /* this will lead to a badly generated package */
1050 +
1051 + if (len > 14)
1052 + len = 14;
1053 +
1054 + for (i=0; i<len; i++)
1055 + pw[i] = toupper(password[i]);
1056 +
1057 + for (; i<14; i++)
1058 + pw[i] = 0;
1059 +
1060 + {
1061 + /* create LanManager hashed password */
1062 + DES_key_schedule ks;
1063 +
1064 + setup_des_key(pw, DESKEY(ks));
1065 + DES_ecb_encrypt((DES_cblock *)magic, (DES_cblock *)lmbuffer,
1066 + DESKEY(ks), DES_ENCRYPT);
1067 +
1068 + setup_des_key(pw+7, DESKEY(ks));
1069 + DES_ecb_encrypt((DES_cblock *)magic, (DES_cblock *)(lmbuffer+8),
1070 + DESKEY(ks), DES_ENCRYPT);
1071 +
1072 + memset(lmbuffer+16, 0, 5);
1073 + }
1074 + /* create LM responses */
1075 + calc_resp(lmbuffer, nonce, lmresp);
1076 +
1077 +#ifdef USE_NTRESPONSES
1078 + {
1079 + /* create NT hashed password */
1080 + MD4_CTX MD4;
1081 +
1082 + len = strlen(password);
1083 +
1084 + for (i=0; i<len; i++) {
1085 + pw[2*i] = password[i];
1086 + pw[2*i+1] = 0;
1087 + }
1088 +
1089 + MD4_Init(&MD4);
1090 + MD4_Update(&MD4, pw, 2*len);
1091 + MD4_Final(ntbuffer, &MD4);
1092 +
1093 + memset(ntbuffer+16, 0, 8);
1094 + }
1095 +
1096 + calc_resp(ntbuffer, nonce, ntresp);
1097 +#endif
1098 +
1099 + free(pw);
1100 +}
1101 +
1102 +#define SHORTPAIR(x) ((x) & 0xff), ((x) >> 8)
1103 +#define LONGQUARTET(x) ((x) & 0xff), (((x) >> 8)&0xff), \
1104 + (((x) >>16)&0xff), ((x)>>24)
1105 +
1106 +/* this is for creating ntlm header output */
1107 +static int ne_output_ntlm(ne_ntlm_context *ctx)
1108 +{
1109 + const char *domain=""; /* empty */
1110 + const char *host=""; /* empty */
1111 + int domlen=strlen(domain);
1112 + int hostlen = strlen(host);
1113 + int hostoff; /* host name offset */
1114 + int domoff; /* domain name offset */
1115 + int size;
1116 + unsigned char ntlmbuf[256]; /* enough, unless the host/domain is very long */
1117 +
1118 + if(!ctx->user || !ctx->passwd)
1119 + /* no user, no auth */
1120 + return 0; /* OK */
1121 +
1122 + switch(ctx->state) {
1123 + case NTLMSTATE_TYPE1:
1124 + default: /* for the weird cases we (re)start here */
1125 + hostoff = 32;
1126 + domoff = hostoff + hostlen;
1127 +
1128 + /* Create and send a type-1 message:
1129 +
1130 + Index Description Content
1131 + 0 NTLMSSP Signature Null-terminated ASCII "NTLMSSP"
1132 + (0x4e544c4d53535000)
1133 + 8 NTLM Message Type long (0x01000000)
1134 + 12 Flags long
1135 + 16 Supplied Domain security buffer(*)
1136 + 24 Supplied Workstation security buffer(*)
1137 + 32 start of data block
1138 +
1139 + */
1140 +
1141 + snprintf((char *)ntlmbuf, sizeof(ntlmbuf), "NTLMSSP%c"
1142 + "\x01%c%c%c" /* 32-bit type = 1 */
1143 + "%c%c%c%c" /* 32-bit NTLM flag field */
1144 + "%c%c" /* domain length */
1145 + "%c%c" /* domain allocated space */
1146 + "%c%c" /* domain name offset */
1147 + "%c%c" /* 2 zeroes */
1148 + "%c%c" /* host length */
1149 + "%c%c" /* host allocated space */
1150 + "%c%c" /* host name offset */
1151 + "%c%c" /* 2 zeroes */
1152 + "%s" /* host name */
1153 + "%s", /* domain string */
1154 + 0, /* trailing zero */
1155 + 0,0,0, /* part of type-1 long */
1156 +
1157 + LONGQUARTET(
1158 + NTLMFLAG_NEGOTIATE_OEM| /* 2 */
1159 + NTLMFLAG_NEGOTIATE_NTLM_KEY /* 200 */
1160 + /* equals 0x0202 */
1161 + ),
1162 + SHORTPAIR(domlen),
1163 + SHORTPAIR(domlen),
1164 + SHORTPAIR(domoff),
1165 + 0,0,
1166 + SHORTPAIR(hostlen),
1167 + SHORTPAIR(hostlen),
1168 + SHORTPAIR(hostoff),
1169 + 0,0,
1170 + host, domain);
1171 +
1172 + /* initial packet length */
1173 + size = 32 + hostlen + domlen;
1174 +
1175 + /* now keeper of the base64 encoded package size */
1176 + if (ctx->requestToken) ne_free(ctx->requestToken);
1177 + ctx->requestToken = ne_base64(ntlmbuf, size);
1178 +
1179 + break;
1180 +
1181 + case NTLMSTATE_TYPE2:
1182 + /* We received the type-2 already, create a type-3 message:
1183 +
1184 + Index Description Content
1185 + 0 NTLMSSP Signature Null-terminated ASCII "NTLMSSP"
1186 + (0x4e544c4d53535000)
1187 + 8 NTLM Message Type long (0x03000000)
1188 + 12 LM/LMv2 Response security buffer(*)
1189 + 20 NTLM/NTLMv2 Response security buffer(*)
1190 + 28 Domain Name security buffer(*)
1191 + 36 User Name security buffer(*)
1192 + 44 Workstation Name security buffer(*)
1193 + (52) Session Key (optional) security buffer(*)
1194 + (60) Flags (optional) long
1195 + 52 (64) start of data block
1196 +
1197 + */
1198 +
1199 + {
1200 + int lmrespoff;
1201 + int ntrespoff;
1202 + int useroff;
1203 + unsigned char lmresp[0x18]; /* fixed-size */
1204 +#ifdef USE_NTRESPONSES
1205 + unsigned char ntresp[0x18]; /* fixed-size */
1206 +#endif
1207 + const char *user;
1208 + int userlen;
1209 +
1210 + user = strchr(ctx->user, '\\');
1211 + if(!user)
1212 + user = strchr(ctx->user, '/');
1213 +
1214 + if (user) {
1215 + domain = ctx->user;
1216 + domlen = user - domain;
1217 + user++;
1218 + }
1219 + else
1220 + user = ctx->user;
1221 + userlen = strlen(user);
1222 +
1223 + mkhash(ctx->passwd, &ctx->nonce[0], lmresp
1224 +#ifdef USE_NTRESPONSES
1225 + , ntresp
1226 +#endif
1227 + );
1228 +
1229 + domoff = 64; /* always */
1230 + useroff = domoff + domlen;
1231 + hostoff = useroff + userlen;
1232 + lmrespoff = hostoff + hostlen;
1233 + ntrespoff = lmrespoff + 0x18;
1234 +
1235 + /* Create the big type-3 message binary blob */
1236 + size = snprintf((char *)ntlmbuf, sizeof(ntlmbuf),
1237 + "NTLMSSP%c"
1238 + "\x03%c%c%c" /* type-3, 32 bits */
1239 +
1240 + "%c%c%c%c" /* LanManager length + allocated space */
1241 + "%c%c" /* LanManager offset */
1242 + "%c%c" /* 2 zeroes */
1243 +
1244 + "%c%c" /* NT-response length */
1245 + "%c%c" /* NT-response allocated space */
1246 + "%c%c" /* NT-response offset */
1247 + "%c%c" /* 2 zeroes */
1248 +
1249 + "%c%c" /* domain length */
1250 + "%c%c" /* domain allocated space */
1251 + "%c%c" /* domain name offset */
1252 + "%c%c" /* 2 zeroes */
1253 +
1254 + "%c%c" /* user length */
1255 + "%c%c" /* user allocated space */
1256 + "%c%c" /* user offset */
1257 + "%c%c" /* 2 zeroes */
1258 +
1259 + "%c%c" /* host length */
1260 + "%c%c" /* host allocated space */
1261 + "%c%c" /* host offset */
1262 + "%c%c%c%c%c%c" /* 6 zeroes */
1263 +
1264 + "\xff\xff" /* message length */
1265 + "%c%c" /* 2 zeroes */
1266 +
1267 + "\x01\x82" /* flags */
1268 + "%c%c" /* 2 zeroes */
1269 +
1270 + /* domain string */
1271 + /* user string */
1272 + /* host string */
1273 + /* LanManager response */
1274 + /* NT response */
1275 + ,
1276 + 0, /* zero termination */
1277 + 0,0,0, /* type-3 long, the 24 upper bits */
1278 +
1279 + SHORTPAIR(0x18), /* LanManager response length, twice */
1280 + SHORTPAIR(0x18),
1281 + SHORTPAIR(lmrespoff),
1282 + 0x0, 0x0,
1283 +
1284 +#ifdef USE_NTRESPONSES
1285 + SHORTPAIR(0x18), /* NT-response length, twice */
1286 + SHORTPAIR(0x18),
1287 +#else
1288 + 0x0, 0x0,
1289 + 0x0, 0x0,
1290 +#endif
1291 + SHORTPAIR(ntrespoff),
1292 + 0x0, 0x0,
1293 +
1294 + SHORTPAIR(domlen),
1295 + SHORTPAIR(domlen),
1296 + SHORTPAIR(domoff),
1297 + 0x0, 0x0,
1298 +
1299 + SHORTPAIR(userlen),
1300 + SHORTPAIR(userlen),
1301 + SHORTPAIR(useroff),
1302 + 0x0, 0x0,
1303 +
1304 + SHORTPAIR(hostlen),
1305 + SHORTPAIR(hostlen),
1306 + SHORTPAIR(hostoff),
1307 + 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
1308 +
1309 + 0x0, 0x0,
1310 +
1311 + 0x0, 0x0);
1312 +
1313 + /* size is now 64 */
1314 + size=64;
1315 + ntlmbuf[62]=ntlmbuf[63]=0;
1316 +
1317 + /* Make sure that the user and domain strings fit in the target buffer
1318 + before we copy them there. */
1319 + if(size + userlen + domlen >= sizeof(ntlmbuf)) {
1320 + return -1;
1321 + }
1322 +
1323 + memcpy(&ntlmbuf[size], domain, domlen);
1324 + size += domlen;
1325 +
1326 + memcpy(&ntlmbuf[size], user, userlen);
1327 + size += userlen;
1328 +
1329 + /* we append the binary hashes to the end of the blob */
1330 + if(size < ((int)sizeof(ntlmbuf) - 0x18)) {
1331 + memcpy(&ntlmbuf[size], lmresp, 0x18);
1332 + size += 0x18;
1333 + }
1334 +
1335 +#ifdef USE_NTRESPONSES
1336 + if(size < ((int)sizeof(ntlmbuf) - 0x18)) {
1337 + memcpy(&ntlmbuf[size], ntresp, 0x18);
1338 + size += 0x18;
1339 + }
1340 +#endif
1341 +
1342 + ntlmbuf[56] = size & 0xff;
1343 + ntlmbuf[57] = size >> 8;
1344 +
1345 + /* convert the binary blob into base64 */
1346 + ctx->requestToken = ne_base64(ntlmbuf, size);
1347 +
1348 + ctx->state = NTLMSTATE_TYPE3; /* we sent a type-3 */
1349 + }
1350 + break;
1351 +
1352 + case NTLMSTATE_TYPE3:
1353 + /* connection is already authenticated,
1354 + * don't send a header in future requests */
1355 + if (ctx->requestToken) ne_free(ctx->requestToken);
1356 + ctx->requestToken = NULL;
1357 + break;
1358 + }
1359 +
1360 + return 0; /* OK */
1361 +}
1362 +
1363 +int ne_ntlm_create_context(ne_ntlm_context **context, const char *userName, const char *password)
1364 +{
1365 + if (context == NULL) {
1366 + return -1;
1367 + } else {
1368 + ne_ntlm_context *ctx = ne_calloc(sizeof(ne_ntlm_context));
1369 +
1370 + ctx->state = NTLMSTATE_NONE;
1371 + ctx->user = ne_strdup(userName);
1372 + ctx->passwd = ne_strdup(password);
1373 +
1374 + *context = ctx;
1375 + return 0;
1376 + }
1377 +}
1378 +
1379 +int ne_ntlm_destroy_context(ne_ntlm_context *context)
1380 +{
1381 + if (context != NULL) {
1382 + if (context->user)
1383 + ne_free(context->user);
1384 +
1385 + if (context->passwd)
1386 + ne_free(context->passwd);
1387 +
1388 + if (context->requestToken)
1389 + ne_free(context->requestToken);
1390 +
1391 + ne_free(context);
1392 + }
1393 + return 0;
1394 +}
1395 +
1396 +int ne_ntlm_clear_context(ne_ntlm_context *context)
1397 +{
1398 + return 0;
1399 +}
1400 +
1401 +int ne_ntlm_authenticate(ne_ntlm_context *context, const char *responseToken)
1402 +{
1403 + if (context == NULL) {
1404 + return -1;
1405 + } else {
1406 + if (context->state <= NTLMSTATE_TYPE3) {
1407 + ntlm ntlmstatus = ne_input_ntlm(context, responseToken);
1408 +
1409 + if (ntlmstatus != NTLM_FINE) {
1410 + return -1;
1411 + }
1412 + }
1413 + }
1414 + return ne_output_ntlm(context);
1415 +}
1416 +
1417 +char *ne_ntlm_getRequestToken(ne_ntlm_context *context)
1418 +{
1419 + if (context == NULL) {
1420 + return NULL;
1421 + } else {
1422 + if (context->requestToken) {
1423 + char *ret = ne_strdup(context->requestToken);
1424 + ne_free(context->requestToken);
1425 + context->requestToken = NULL;
1426 + return ret;
1427 + } else {
1428 + return NULL;
1429 + }
1430 + }
1431 +}
1432 +
1433 +#endif /* HAVE_OPENSSL */
1434 +#endif /* HAVE_NTLM */
1435 --- misc/neon-0.28.2/src/ne_ntlm.h 2009-06-24 12:49:38.000000000 +0200
1436 +++ misc/build/neon-0.28.2/src/ne_ntlm.h 2009-06-24 12:46:45.000000000 +0200
1437 @@ -1 +1,44 @@
1438 -dummy
1439 +/*
1440 + Handling of NTLM Authentication
1441 + Copyright (C) 2009, Kai Sommerfeld <kso@openoffice.org>
1442 +
1443 + This library is free software; you can redistribute it and/or
1444 + modify it under the terms of the GNU Library General Public
1445 + License as published by the Free Software Foundation; either
1446 + version 2 of the License, or (at your option) any later version.
1447 +
1448 + This library is distributed in the hope that it will be useful,
1449 + but WITHOUT ANY WARRANTY; without even the implied warranty of
1450 + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
1451 + Library General Public License for more details.
1452 +
1453 + You should have received a copy of the GNU Library General Public
1454 + License along with this library; if not, write to the Free
1455 + Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
1456 + MA 02111-1307, USA
1457 +
1458 +*/
1459 +#ifndef NE_NTLM_H
1460 +#define NE_NTLM_H
1461 +
1462 +#include "config.h"
1463 +
1464 +/* PRIVATE TO NEON -- NOT PART OF THE EXTERNAL API. */
1465 +
1466 +#ifdef HAVE_NTLM
1467 +
1468 +typedef struct ne_ntlm_context_s ne_ntlm_context;
1469 +
1470 +int ne_ntlm_create_context(ne_ntlm_context **context, const char *userName, const char *password);
1471 +
1472 +int ne_ntlm_destroy_context(ne_ntlm_context *context);
1473 +
1474 +int ne_ntlm_clear_context(ne_ntlm_context *context);
1475 +
1476 +int ne_ntlm_authenticate(ne_ntlm_context *context, const char *responseToken);
1477 +
1478 +char *ne_ntlm_getRequestToken(ne_ntlm_context *context);
1479 +
1480 +#endif /* HAVE_NTLM */
1481 +
1482 +#endif /* NE_NTLM_H */
1483 --- misc/neon-0.28.2/src/ne_socket.c 2008-02-28 14:19:19.000000000 +0100
1484 +++ misc/build/neon-0.28.2/src/ne_socket.c 2009-06-24 12:49:13.000000000 +0200
1485 @@ -60,6 +60,7 @@
1486 #include <stddef.h>
1487 #ifdef USE_GETADDRINFO
1488 #include <ws2tcpip.h>
1489 +#include <Wspiapi.h>
1490 #endif
1491 #endif
1493 --- misc/neon-0.28.2/src/ne_sspi.c 2007-08-10 17:26:08.000000000 +0200
1494 +++ misc/build/neon-0.28.2/src/ne_sspi.c 2009-06-24 12:46:45.000000000 +0200
1495 @@ -202,9 +202,48 @@
1496 return -1;
1497 }
1499 + return 0;
1500 +}
1501 +
1502 +/*
1503 + * Simplification wrapper arround AcquireCredentialsHandle as most of
1504 + * the parameters do not change.
1505 + */
1506 +static int acquireCredentialsHandleForUsername(CredHandle * credentials, char *package, const char *username, const char *password)
1507 +{
1508 + SECURITY_STATUS status;
1509 + TimeStamp timestamp;
1510 +
1511 + const char *domain = "";
1512 +
1513 + int rc, rcISC;
1514 + SecPkgInfo *secPackInfo;
1515 + SEC_WINNT_AUTH_IDENTITY *nameAndPwd = NULL;
1516 + int bytesReceived = 0, bytesSent = 0;
1517 +
1518 + nameAndPwd = (SEC_WINNT_AUTH_IDENTITY *) malloc( sizeof(SEC_WINNT_AUTH_IDENTITY) );
1519 + memset( nameAndPwd, '\0', sizeof (*nameAndPwd) );
1520 + nameAndPwd->Domain = (unsigned char *) _strdup( domain? domain: "" );
1521 + nameAndPwd->DomainLength = domain? strlen( domain ): 0;
1522 + nameAndPwd->User = (unsigned char *) _strdup( username? username: "" );
1523 + nameAndPwd->UserLength = username? strlen( username ): 0;
1524 + nameAndPwd->Password = (unsigned char *) _strdup( password? password: "" );
1525 + nameAndPwd->PasswordLength = password? strlen( password ): 0;
1526 + nameAndPwd->Flags = SEC_WINNT_AUTH_IDENTITY_ANSI;
1527 +
1528 + status = pSFT->AcquireCredentialsHandle( NULL, package, SECPKG_CRED_OUTBOUND,
1529 + NULL, nameAndPwd, NULL, NULL, credentials, ×tamp );
1530 +
1531 + if (status != SEC_E_OK) {
1532 + NE_DEBUG(NE_DBG_HTTPAUTH,
1533 + "sspi: AcquireCredentialsHandle [fail] [%x].\n", status);
1534 + return -1;
1535 + }
1536 +
1537 return 0;
1538 }
1540 +
1541 /*
1542 * Wrapper arround initializeSecurityContext. Supplies several
1543 * default parameters as well as logging in case of errors.
1544 @@ -483,7 +522,7 @@
1545 * Processes received authentication tokens as well as supplies the
1546 * response token.
1547 */
1548 -int ne_sspi_authenticate(void *context, const char *base64Token, char **responseToken)
1549 +int ne_sspi_authenticate(void *context, const char *base64Token, char **responseToken, const char* username, const char* password)
1550 {
1551 SecBufferDesc outBufferDesc;
1552 SecBuffer outBuffer;
1553 @@ -560,14 +599,23 @@
1555 /* Reset any existing context since we are starting over */
1556 resetContext(sspiContext);
1557 +
1558 + if (strlen(username) != 0) {
1559 + if (acquireCredentialsHandleForUsername
1560 + (&sspiContext->credentials, sspiContext->mechanism, username, password) != SEC_E_OK) {
1561 + freeBuffer(&outBufferDesc);
1562 + NE_DEBUG(NE_DBG_HTTPAUTH, "sspi: acquireCredentialsHandleForUsername failed.\n");
1563 + return -1;
1564 + }
1565 + } else {
1566 + if (acquireCredentialsHandle
1567 + (&sspiContext->credentials, sspiContext->mechanism) != SEC_E_OK) {
1568 + freeBuffer(&outBufferDesc);
1569 + NE_DEBUG(NE_DBG_HTTPAUTH, "sspi: acquireCredentialsHandle failed.\n");
1570 + return -1;
1571 + }
1572 + }
1574 - if (acquireCredentialsHandle
1575 - (&sspiContext->credentials, sspiContext->mechanism) != SEC_E_OK) {
1576 - freeBuffer(&outBufferDesc);
1577 - NE_DEBUG(NE_DBG_HTTPAUTH,
1578 - "sspi: acquireCredentialsHandle failed.\n");
1579 - return -1;
1580 - }
1582 securityStatus =
1583 initializeSecurityContext(&sspiContext->credentials, NULL,
1584 --- misc/neon-0.28.2/src/ne_sspi.h 2006-02-12 13:05:14.000000000 +0100
1585 +++ misc/build/neon-0.28.2/src/ne_sspi.h 2009-06-24 12:46:45.000000000 +0200
1586 @@ -41,7 +41,7 @@
1587 int ne_sspi_clear_context(void *context);
1589 int ne_sspi_authenticate(void *context, const char *base64Token,
1590 - char **responseToken);
1591 + char **responseToken, const char* username, const char* password);
1593 #endif /* HAVE_SSPI */
1595 --- misc/neon-0.28.2/src/ne_uri.c 2007-12-05 12:04:47.000000000 +0100
1596 +++ misc/build/neon-0.28.2/src/ne_uri.c 2009-06-24 12:46:45.000000000 +0200
1597 @@ -42,7 +42,7 @@
1598 #include "ne_alloc.h"
1599 #include "ne_uri.h"
1601 -/* URI ABNF from RFC 3986: */
1602 +/* URI ABNF from RFC 3986: (TKR: SharePoint is contradictory to this RFC. So I fix it here. )*/
1604 #define PS (0x0001) /* "+" */
1605 #define PC (0x0002) /* "%" */
1606 @@ -67,6 +67,9 @@
1608 #define OT (0x4000) /* others */
1610 +/* TKR new symbol */
1611 +#define WS (0x8000) /* Whitespaces ( Space, Tab ) */
1612 +
1613 #define URI_ALPHA (AL)
1614 #define URI_DIGIT (DG)
1616 @@ -83,20 +86,21 @@
1617 /* pchar = unreserved / pct-encoded / sub-delims / ":" / "@" */
1618 #define URI_PCHAR (URI_UNRESERVED | PC | URI_SUBDELIM | CL | AT)
1619 /* invented: segchar = pchar / "/" */
1620 -#define URI_SEGCHAR (URI_PCHAR | FS)
1621 +/* (TKR) WS added */
1622 +#define URI_SEGCHAR (URI_PCHAR | FS | WS)
1623 /* query = *( pchar / "/" / "?" ) */
1624 #define URI_QUERY (URI_PCHAR | FS | QU)
1625 /* fragment == query */
1626 #define URI_FRAGMENT URI_QUERY
1628 /* any characters which should be path-escaped: */
1629 -#define URI_ESCAPE ((URI_GENDELIM & ~(FS)) | URI_SUBDELIM | OT | PC)
1630 +#define URI_ESCAPE ((URI_GENDELIM & ~(FS)) | URI_SUBDELIM | OT | WS | PC)
1632 static const unsigned int uri_chars[256] = {
1633 /* 0xXX x0 x2 x4 x6 x8 xA xC xE */
1634 -/* 0x */ OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT,
1635 +/* 0x */ OT, OT, OT, OT, OT, OT, OT, OT, OT, WS, OT, OT, OT, OT, OT, OT,
1636 /* 1x */ OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT, OT,
1637 -/* 2x */ OT, SD, OT, GD, SD, PC, SD, SD, SD, SD, SD, PS, SD, DS, DT, FS,
1638 +/* 2x */ WS, SD, OT, GD, SD, PC, SD, SD, SD, SD, SD, PS, SD, DS, DT, FS,
1639 /* 3x */ DG, DG, DG, DG, DG, DG, DG, DG, DG, DG, CL, SD, OT, SD, OT, QU,
1640 /* 4x */ AT, AL, AL, AL, AL, AL, AL, AL, AL, AL, AL, AL, AL, AL, AL, AL,
1641 /* 5x */ AL, AL, AL, AL, AL, AL, AL, AL, AL, AL, AL, GD, OT, GD, OT, US,