CVS update: samba/source/libads

Jeremy Allison jra at samba.org
Tue Jul 29 05:45:30 GMT 2003


On Tue, Jul 29, 2003 at 03:32:47PM +1000, Andrew Bartlett wrote:
> 
> While you are looking at kerberos issues, I'll note that kerberos SMB
> singing does not work with '8 byte' kerberos session keys (like those
> generated by some enc types).
> 
> I've tried NULL-padding, and padding with 0xab (this is how the LM key
> is extended), to fill it to 16 bytes, but with no success.
> 
> Also tried the smb signing stuff with just 8 bytes of key.

I have only tested with 16 byte enc type 23 subkeys. This is what
a MS client asks for from the kdc I think. I would doubt it works
with any other enctype (probably never tested by MS).

Jeremy.



More information about the samba-technical mailing list