svn commit: samba r13474 - in trunk/source/libsmb: .

[Jeremy Allison]

On Mon, Feb 13, 2006 at 08:24:24AM +1100, Andrew Bartlett wrote:
> On Sun, 2006-02-12 at 16:44 +0000, jra at samba.org wrote:
> > Author: jra
> > Date: 2006-02-12 16:44:33 +0000 (Sun, 12 Feb 2006)
> > New Revision: 13474
> > 
> > WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=13474
> > 
> > Log:
> > Back port r13470, r13471, r13472 from Samba4. Thanks Andrew:
> (smb signing/ntlmssp session key fixes)
> 
> > We should now try retesting with NT4. This should be standalone
> > enough to port into a SAMBA_3_0_RELEASE branch fix.
> 
> My testing shows that this works against win2000 SP0 (workstation),
> Win2k3 SP0 (DC), Win2k3 SP1 (DC).
> 
> It partially works against NT4 SP6 (DC).  That is, we pass the tests for
> the correct session key, but unless we have the 'LM_KEY' or 'NTLM2'
> flags set, we do not pass the creation of a sealed connection.
> 
> So, NTLMv1 sealing of RPC pipes is broken against NT.  The problem is,
> I'm having trouble seeing the differences in the negotiated options, but
> there must be something in there somewhere...

Ok, apparently this works with 3.0.14a, so we just need to examine
the difference between this code and the current code in SAMBA_3_0
SVN - debug level 100 will dump out the crypto state so we can
test. I'm in Boston until tomorrow so can't test this myself.

Jeremy.