[cifs-protocol] Re: Regarding [MS-KILE] 3.4.5.1 Three-Leg DCE-Style Mutual Authentication

[Andrew Bartlett]

On Mon, 2008-07-28 at 15:31 -0700, John Dunning wrote:
> Hello Andrew,
> 
>    I wanted to touch bases with you to let you know that I am
> researching your question. In your email you indicated that Windows XP
> seems to take care of the sequence numbers correctly and I wanted to
> make sure I understood this. Are you saying that you are only seeing
> this behavior with Vista? Would it be possible for you to obtain a
> network trace of the case where it fails; when you don’t add 1 to the
> sequence number around line 690 of your code? 

That is the trace already supplied.  (As we fault anyway, just a few
more lines down the gsskrb5_unwrap() processing, , because we don't
match the checksum, even if we match the sequence number)

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/cifs-protocol/attachments/20080729/c09ee182/attachment.bin