svn commit: samba r13342 - in branches/SAMBA_4_0/source: auth/gensec libcli/ldap

[abartlet at samba.org]

Author: abartlet
Date: 2006-02-04 09:53:50 +0000 (Sat, 04 Feb 2006)
New Revision: 13342

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=13342

Log:
Make the GSSAPI SASL mech actually work, by (shock horror) reading the spec.

GSSAPI differs from GSS-SPNEGO in an additional 3 packets, negotiating
a buffer size and what integrity protection/privacy should be used.

I worked off draft-ietf-sasl-gssapi-03, and this works against Win2k3.

I'm doing this in the hope that Apple clients as well as SASL-based
LDAP tools may get a bit further.  

I still can't get ldapsearch to work, it fails with the ever-helpful
'Local error'.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/auth/gensec/gensec.c
   branches/SAMBA_4_0/source/auth/gensec/gensec_gssapi.c
   branches/SAMBA_4_0/source/libcli/ldap/ldap_bind.c


Changeset:
Sorry, the patch is too large (729 lines) to include; please use WebSVN to see it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=13342