Kerberos PAC now validated

Andrew Bartlett abartlet at samba.org
Tue Jun 28 09:52:30 GMT 2005


Samba4 now correctly validates the Kerberos PAC, as issued by Active
Directory.  (Previously in Samba3 and Samba4 we could parse the PAC, but
not verify the digital signatures). 

The next stab will be to make our KDC issue the PAC, but given the
history of Samba4 I expect the server will now be pretty easy :-)

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20050628/c4d0ecf7/attachment.bin


More information about the samba-technical mailing list