svn commit: samba r21903 - in branches/SAMBA_3_0/source/libsmb: .

[Luke Howard]

>> I think this is an abstraction violation. I don't think there is a
>> risk with RC4; RFC 4757 is pretty well designed to avoid the usual
>> sorts of problems.
>
>Yeah, but where do we get the session key from, assuming Samba3 doesn't
>want to bring in it's own krb5 libs?

Good point. But you can use gss_krb5_export_lucid_sec_context() on
MIT or gss_krb5_get_subkey()/gss_krb5_get_initiator_subkey() on
Heimdal.

Granted, you might not support every version of the libraries out
there, but given this is a new feature that might be reasonable.

-- Luke

--
www.padl.com | www.lukehoward.com