summaryrefslogtreecommitdiff
path: root/README
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2012-02-14 18:29:54 +1100
committerStefan Metzmacher <metze@samba.org>2012-02-16 15:18:42 +0100
commit5c9b6db68e0f535ed2b42bbfee310b7cebf65ca4 (patch)
tree4cdda382b5e50b351311c036d04cb5fa26b4c1fa /README
parent1d0684c8452ddaec3ab3f715382503c87b0ec534 (diff)
downloadsamba-5c9b6db68e0f535ed2b42bbfee310b7cebf65ca4.tar.gz
samba-5c9b6db68e0f535ed2b42bbfee310b7cebf65ca4.tar.bz2
samba-5c9b6db68e0f535ed2b42bbfee310b7cebf65ca4.zip
s3-gse: Use the session key type, not the lucid context to set NEW_SPNEGO
Using gss_krb5_export_lucid_sec_context() is a problem with MIT krb5, as it (reasonably, I suppose) invalidates the gssapi context on which it is called. Instead, we look to the type of session key which is negotiated, and see if it not AES (or newer). If we negotiated AES or newer, then we set GENSEC_FEATURE_NEW_SPENGO so that we know to generate valid mechListMic values in SPNEGO. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'README')
0 files changed, 0 insertions, 0 deletions