Combined DES salt and Keytab cleanup patch
Gerald (Jerry) Carter
jerry at samba.org
Thu Jul 13 16:57:55 GMT 2006
-----BEGIN PGP SIGNED MESSAGE-----
Love Hörnquist Åstrand wrote:
>> I think this is probably helpful:
> Sure, if do like microsoft see to do it, you can't
> use keytabs.
> If you use keytabs you have do case insensitive
> matching, how microsoft do that in their kdc I don't
> know, but I would assume ldap stringprep or something
> like that.
I agree. it's horrible, But it's the world we live in.
We can probably do a better job though. I'm still working
on more cleanups.
I'm wondering if the name is always canoncalized by the
AD KDC based on the matching SPN.
Samba ------- http://www.samba.org
Centeris ----------- http://www.centeris.com
"What man is a man who does not make the world better?" --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the samba-technical