svn commit: samba r21991 - in branches/SAMBA_3_0/source: include lib libsmb smbd

[Jeremy Allison]

On Thu, Mar 29, 2007 at 09:41:23AM +0200, Stefan (metze) Metzmacher wrote:
> > 
> > Log:
> > I hate Steve French :-). Add support for encryption
> > contexts....
> > Jeremy.
> 
> Hi Jeremy,
> 
> can you explain that a bit more?

What - the hating Steve French (that's obvious) or the encryption
contexts ?

> What is the typical request sequence to establish the encryption context?

trans2 setfsinfo.

> So the encryption context is attached to the connection_struct (which is
> a tree connect in samba3)?

That's the plan - not yet implemented. Context zero represents 
the "global" context for fully encrypted traffic on all tid's.

> Wouldn't it be better to attach it to the session id instead of the tree
> id, as a tree id can be used by multiple sessions.

No. The use case Steve bugged me about was the ability 
to have some shares (tid's) encrypted and some not on
the same session. In this case encryption is a property
of the tid, not the sessionid.

> It would be really nice to have a specification of all this in our wiki
> or so.

Yes it would, wouldn't it. As soon as it's in a form
where it's worth specifying, I'll specify it :-).

Jeremy.