svn commit: samba r8250 - in branches/SAMBA_4_0/source: auth/gensec auth/kerberos librpc/idl torture/auth

[abartlet at samba.org]

Author: abartlet
Date: 2005-07-09 01:58:38 +0000 (Sat, 09 Jul 2005)
New Revision: 8250

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=8250

Log:
More PAC work.  We now sucessfully verify the KDC signature from my DC
(I have included the krbtgt key from my test network).

It turns out the krbtgt signature is over the 16 (or whatever,
enc-type dependent) bytes of the signature, not the entire structure.  

Also do not even try to use Kerberos or GSSAPI on an IP address, it
will only fail.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/auth/gensec/gensec_gssapi.c
   branches/SAMBA_4_0/source/auth/gensec/gensec_krb5.c
   branches/SAMBA_4_0/source/auth/kerberos/kerberos.h
   branches/SAMBA_4_0/source/auth/kerberos/kerberos_pac.c
   branches/SAMBA_4_0/source/librpc/idl/krb5pac.idl
   branches/SAMBA_4_0/source/torture/auth/pac.c


Changeset:
Sorry, the patch is too large (316 lines) to include; please use WebSVN to see it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=8250