[PATCH] Mutual authentication, keytabs, and SMB session keys

Richard Sharpe rsharpe at richardsharpe.com
Mon Feb 24 02:23:38 GMT 2003


On Mon, 24 Feb 2003, Luke Howard wrote:

> 
> Hi Andrew,
> 
> >Doesn't the kerberos deal with the byte order?  Or shouldn't we create a
> >asn1_write function to do this?
> 
> The token ID is not ASN.1. Read RFC 1964.

Wow, I recall saying this twice before :-(
 
> >Can we have a name for this magic number?  A define in asn_1.h or
> >similar?
> 
> Again, see RFC 1964. Actually, they probably shouldn't be little-
> endian shorts; my bad (but they certainly weren't ASN.1 booleans! :-))
> 
> Better to do:
> 
> #define TOK_ID_KRB_AP_REQ	"\x01\x00"
> #define TOK_ID_KRB_AP_REP	"\x02\x00"

There are a couple of other token IDs we might want as well.

> I'll knock up another patch later today...
> 
> cheers,
> 
> -- Luke
> 
> --
> Luke Howard | PADL Software Pty Ltd | www.padl.com
> 

-- 
Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com



More information about the samba-technical mailing list