svn commit: samba r4460 - in branches/SAMBA_4_0/source: libcli/auth libcli/ldap param

[abartlet at samba.org]

Author: abartlet
Date: 2005-01-01 00:19:08 +0000 (Sat, 01 Jan 2005)
New Revision: 4460

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=4460

Log:
Add a new GENSEC module: gensec_gssapi
(disabled by default, set parametric option: gensec:gssapi=yes to enable).

This module backs directly onto GSSAPI, and allows us to sign and seal
GSSAPI/Krb5 connections in particular.  This avoids me reinventing the
entire GSSAPI wheel.

Currently a lot of things are left as default - we will soon start
specifiying OIDs as well as passwords (it uses the keytab only at the
moment).  Tested with our LDAP-* torture tests against Win2k3.

My hope is to use this module to access the new SPNEGO implementation
in Heimdal, to avoid having to standards-verify our own.

Andrew Bartlett

Added:
   branches/SAMBA_4_0/source/libcli/auth/gensec_gssapi.c
Modified:
   branches/SAMBA_4_0/source/libcli/auth/gensec.mk
   branches/SAMBA_4_0/source/libcli/auth/spnego.c
   branches/SAMBA_4_0/source/libcli/ldap/ldap_client.c
   branches/SAMBA_4_0/source/param/loadparm.c


Changeset:
Sorry, the patch is too large (480 lines) to include; please use WebSVN to see it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=4460