[SCM] Samba Shared Repository - branch master updated

Jeremy Allison jra at samba.org
Wed May 19 09:51:41 MDT 2010


On Wed, May 19, 2010 at 04:17:00PM +0200, Guenther Deschner wrote:
> On Tue, May 18, 2010 at 06:42:07PM -0500, Jeremy Allison wrote:
> > The branch, master has been updated
> >        via  6a90307... Fix our NTLMSSP implementation against the Microsoft torture tester.
> >       from  829c876... Change data_blob() to be based on top of data_blob_talloc(), instead of the reverse (as it is now).
> > 
> > http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
> > 
> > 
> > - Log -----------------------------------------------------------------
> > commit 6a903078cb133a1f46c9d6f24f50d863e31b743c
> > Author: Jeremy Allison <jra at samba.org>
> > Date:   Tue May 18 16:32:13 2010 -0700
> > 
> >     Fix our NTLMSSP implementation against the Microsoft torture tester.
> >     
> >     We need to return a version blob if we negotiate version info.
> >     
> >     Jeremy.
> 
> Hi Jeremy,
> 
> with this change we now announce ntlmssp capabilities just like w2k8r2/win7:
> 
>         Version: struct VERSION
>             ProductMajorVersion      : NTLMSSP_WINDOWS_MAJOR_VERSION_6 (0x6)
>             ProductMinorVersion      : NTLMSSP_WINDOWS_MINOR_VERSION_1 (0x1)
>             ProductBuild             : 0x1db0 (7600)
>             Reserved                 : 000000
>             NTLMRevisionCurrent      : NTLMSSP_REVISION_W2K3 (0xF)
> 
> Is that really what we should do ? (I was just thinking of all the new MsAv
> types like channel bindings, restrictions, etc.). Can we be sure that we
> are not raising wrong expectations on the client side ?

The VERSION info is specifically a debug message only - it has not
effect on client caps. That's what the negotiate flags are.

We need this info correctly specified in NTLMSSP in order to
get access to the new Microsoft test suites, which require this
to be correct as a baseline before they continue (so long as you're
not using krb5 auth).

The good news is krb5 auth works in SMB2 :-).

Jeremy.


More information about the samba-cvs mailing list