Heimdal SPNEGO Won't Eat Negprot GSSAPI Token

Andrew Bartlett abartlet at samba.org
Wed Oct 12 09:47:12 GMT 2005


On Wed, 2005-10-12 at 03:22 -0400, Michael B Allen wrote:

> But I'm not sure that's wrong. Now I'm thinking maybe this initial
> mechList should just be handled externally (A. Bartlett sounds like
> this is pretty much what Samba4 does). 

Samba implements SPNEGO itself, and does not pass this down to the GSS
library.  

We may at some point in the distant future pass these things down, but I
suspect the shear number of extra hooks required will be painful.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20051012/30c818e4/attachment-0001.bin


More information about the samba-technical mailing list