From d54404e56535e68702e363e623d3695f39fbfa82 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Fri, 3 Feb 2012 11:57:30 +1100 Subject: s3-param Remove off-by-default and unused "send spnego principal" This is not honoured by the common SPNEGO code. This matches mondern windows versions which do not send this value, as it would be insecure for a client to rely on it. (See also the depricated client use spnego principal directive). Andrew Bartlett Signed-off-by: Stefan Metzmacher --- source3/include/proto.h | 1 - source3/param/loadparm.c | 10 ---------- 2 files changed, 11 deletions(-) diff --git a/source3/include/proto.h b/source3/include/proto.h index b61fdf1efe..7ca2f8731c 100644 --- a/source3/include/proto.h +++ b/source3/include/proto.h @@ -1277,7 +1277,6 @@ bool lp_unix_extensions(void); bool lp_use_spnego(void); bool lp_client_use_spnego(void); bool lp_client_use_spnego_principal(void); -bool lp_send_spnego_principal(void); bool lp_hostname_lookups(void); bool lp_change_notify(const struct share_params *p ); bool lp_kernel_change_notify(const struct share_params *p ); diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c index c8d5a0994f..20a072d67f 100644 --- a/source3/param/loadparm.c +++ b/source3/param/loadparm.c @@ -934,15 +934,6 @@ static struct parm_struct parm_table[] = { .enum_list = NULL, .flags = FLAG_ADVANCED, }, - { - .label = "send spnego principal", - .type = P_BOOL, - .p_class = P_GLOBAL, - .offset = GLOBAL_VAR(send_spnego_principal), - .special = NULL, - .enum_list = NULL, - .flags = FLAG_ADVANCED, - }, { .label = "username", .type = P_STRING, @@ -5258,7 +5249,6 @@ FN_GLOBAL_BOOL(lp_unix_extensions, bUnixExtensions) FN_GLOBAL_BOOL(lp_use_spnego, bUseSpnego) FN_GLOBAL_BOOL(lp_client_use_spnego, bClientUseSpnego) FN_GLOBAL_BOOL(lp_client_use_spnego_principal, client_use_spnego_principal) -FN_GLOBAL_BOOL(lp_send_spnego_principal, send_spnego_principal) FN_GLOBAL_BOOL(lp_hostname_lookups, bHostnameLookups) FN_GLOBAL_CONST_STRING(lp_dedicated_keytab_file, szDedicatedKeytabFile) FN_GLOBAL_INTEGER(lp_kerberos_method, iKerberosMethod) -- cgit