CVS update: samba/source/smbd

[Andrew Bartlett]

tridge at samba.org wrote:
> 
> Date:   Thu Dec  6 17:01:10 2001
> Author: tridge
> 
> Update of /home/cvs/samba/source/smbd
> In directory va:/tmp/cvs-serv15422
> 
> Modified Files:
>         negprot.c
> Log Message:
> added a "use spnego" option
> 
> you need to set "use spnego = no" for w2k to be able to join a samba
> domain. Otherwise the w2k box will assume we can do kerberos as a KDC

Can we also add a simple check on the variable
'global_spnego_negoitated' to ensure that when it is False, we don't
allow spnego stuff in sesssetup.c?  If we are going to add such an
option we may as well make it secure, not just advisory.  (If, for
example somebody finds a hole in our spnego code we can kill it easily).

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net