Combined DES salt and Keytab cleanup patch
Gerald (Jerry) Carter
jerry at samba.org
Fri Jul 14 01:34:31 GMT 2006
-----BEGIN PGP SIGNED MESSAGE-----
Andrew Bartlett wrote:
>>> * Figure the DES salt based on the domain functional level
>>> and UPN (if present and applicable)
>>> * Only deal with the DES-CBC-MD5, DES-CBC-CRC, and RC4-HMAC
> Why not just deal with the key as presented? We have:
> smb_krb5_get_keyinfo_from_ap_req(), which returns the enc
> type of the incoming ticket.
Hmmm...Did you read the patch ? The point was to limit
the keys in the keytab to enctypes support by AD.
Not ticket decryption.
Samba ------- http://www.samba.org
Centeris ----------- http://www.centeris.com
"What man is a man who does not make the world better?" --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the samba-technical