[cifs-protocol] RE: Regarding [MS-KILE] 3.4.5.1 Three-Leg DCE-Style Mutual Authentication

[John Dunning]

Hi Andrew,

I went back through all the emails that I have seen regarding this case however I don't see any network capture/trace attached. I do have the links to the source code for the client and server. Can you please resend it?

Thanks
John

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: Monday, July 28, 2008 6:39 PM
To: John Dunning
Cc: pfif at tridgell.net; cifs-protocol at samba.org
Subject: Re: Regarding [MS-KILE] 3.4.5.1 Three-Leg DCE-Style Mutual Authentication

On Mon, 2008-07-28 at 15:31 -0700, John Dunning wrote:
> Hello Andrew,
>
>    I wanted to touch bases with you to let you know that I am
> researching your question. In your email you indicated that Windows XP
> seems to take care of the sequence numbers correctly and I wanted to
> make sure I understood this. Are you saying that you are only seeing
> this behavior with Vista? Would it be possible for you to obtain a
> network trace of the case where it fails; when you don't add 1 to the
> sequence number around line 690 of your code?

That is the trace already supplied.  (As we fault anyway, just a few
more lines down the gsskrb5_unwrap() processing, , because we don't
match the checksum, even if we match the sequence number)

Andrew Bartlett
--
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com