Patch for Samba 3.0 to allow machine logins on NTLMSSP and PEAP

Jeremy Allison jra at samba.org
Sat Oct 29 05:06:12 GMT 2005


On Sat, Oct 29, 2005 at 01:21:17PM +1000, Andrew Bartlett wrote:
> This patch allows Samba3 to process machine account logins via
> ntlm_auth, as required for PEAP (and 802.11x) as well as for the new
> Samba3 client behaviour (where we try an NTLMSSP sealed pipe).
> 
> Only pre-NTLMSSP CIFS logins are denied this behaviour, due to early NT
> clients.  The idea is to match current Win2k3 behaviour in the client
> and server.
> 
> I've tested this with winbindd to a Win2k3 domain, but not the
> Samba-server side of things yet, but I wanted to get the patch 'out
> there' for review.  It does change the winbindd protocol again
> (sorry...)
> 
> (I already have the server-side of this in Samba4, and tested).

Thanks for this Andrew - much appreciated ! what did you use to test
the Samba4 server side code and can I use it to test the Samba3 version
you've added here ?

Cheers,

	Jeremy.


More information about the samba-technical mailing list