fix SASL "GSSAPI" bind against w2k3

Gerald (Jerry) Carter jerry at samba.org
Tue Apr 10 16:28:47 GMT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeremy Allison wrote:
> On Tue, Apr 10, 2007 at 09:59:25AM -0500, Gerald (Jerry) Carter wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Stefan (metze) Metzmacher wrote:
>>> Gerald (Jerry) Carter schrieb:
>>>>> Metze,
>>>>>
>>>>>> I'm about to commit the following patch to SAMBA_3_0,
>>>>>> which fixes the LDAP SASL "GSSAPI" bind against w2k3.
>>>>> The comment makes sense to me.  But I didn't work on
>>>>> the original code so I'm not sure why ads->config.bind_dn
>>> I assume tridge read RFC2222 (where adding 'dn:...' is proposed)
>>> and tried the domain base dn and it worked against w2k...
>>>
>>> W2K totally ignores the dn, but w2k3 checks it...
>>>
>>> With the patch w2k (plain) and w2k3 (plain) are happy
>> That's proof enough for me.  Nice work.
> 
> Do we need this for 3.0.25 final ?

No.  IIRC this code was disabled anyways.



jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGG7s/IR7qMdg1EfYRAuvnAJ9NgXxj1TTPSxO+PFD3LlNbl+bmvQCglQUW
LlyDQmvod0Q1KKmeaZRIhYs=
=Fg35
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list