[PATCH CIFS] use CryptoAPI MD4/MD5

Michael B Allen mba2000 at ioplex.com
Fri Oct 3 04:22:03 GMT 2003


> Case 1) requests are signed out of order (request two is signed first
even
> though it has a higher mid) but sent in order over TCP
> Case 2) request one gets signed before request two but request two gets
sent before request one on the TCP socket
>
> At least case two probably would cause the server to invalidate the
frame
> due to unexpected signature and drop the session

Clearly signing and sending will need to be performed without interference
from each other.

As for sorting out the responses I just put the verify sequence value in
the response object (which is always one more than the sign sequence
value) and put the reponse object into a table by mid. So responses can be
received in any order. I don't know if this applies to cifsfs though.

Here's a thread about this sort of thing:

  http://lists.samba.org/pipermail/jcifs/2003-September/002595.html

Mike

-- 
A program should be written to  model the concepts of the task it
performs rather than the physical world or a process because this
maximizes the  potential for it  to be applied  to tasks that are
conceptually similar and, more  important, to tasks that have not
yet been conceived.






More information about the samba-technical mailing list