diff options
author | Günther Deschner <gd@samba.org> | 2009-05-06 19:29:01 +0200 |
---|---|---|
committer | Günther Deschner <gd@samba.org> | 2009-05-06 19:37:39 +0200 |
commit | 78754ab2c9b28ea8ab09d3fd1f5450abe721a2c1 (patch) | |
tree | 674e8aa2641cf444b32774fdbbee8077ee57962f /libgpo/gpext | |
parent | 730c91aaaad42c68fdb44bc51fee6c89e0c22910 (diff) | |
download | samba-78754ab2c9b28ea8ab09d3fd1f5450abe721a2c1.tar.gz samba-78754ab2c9b28ea8ab09d3fd1f5450abe721a2c1.tar.bz2 samba-78754ab2c9b28ea8ab09d3fd1f5450abe721a2c1.zip |
s3-netlogon: Fix NETLOGON credential chain. Fixes Bug #6099 (Windows 7 joining Samba3) and probably many, many more.
Jeremy, with 9a5d5cc1db0ee60486f932e34cd7961b90c70a56 you alter the in negotiate
flags (which are a pointer to the out negotiate flags assigned in the generated
netlogon server code). So, while you wanted to just set the *out* negflags, you
did in fact reset the *in* negflags, effectively eliminating the
NETLOGON_NEG_STRONG_KEYS bit (formerly known as NETLOGON_NEG_128BIT) which then
caused creds_server_init() to generate 64bit creds instead of 128bit, causing
the whole chain to break. *Please* check.
Guenther
Diffstat (limited to 'libgpo/gpext')
0 files changed, 0 insertions, 0 deletions