svn commit: samba r21991 - in branches/SAMBA_3_0/source: include lib libsmb smbd

[James Peach]

On Mar 29, 2007, at 9:31 AM, Jeremy Allison wrote:

> On Thu, Mar 29, 2007 at 09:41:23AM +0200, Stefan (metze) Metzmacher  
> wrote:
>>
>>>
>>
>>> Log:
>>
>>> I hate Steve French :-). Add support for encryption
>>
>>> contexts....
>>
>>> Jeremy.
>>
>> Hi Jeremy,
>>
>> can you explain that a bit more?
>
> What - the hating Steve French (that's obvious) or the encryption
> contexts ?
>
>> What is the typical request sequence to establish the encryption  
>> context?
>
> trans2 setfsinfo.
>
>> So the encryption context is attached to the connection_struct  
>> (which is
>> a tree connect in samba3)?
>
> That's the plan - not yet implemented. Context zero represents
> the "global" context for fully encrypted traffic on all tid's.
>
>> Wouldn't it be better to attach it to the session id instead of the  
>> tree
>> id, as a tree id can be used by multiple sessions.
>
> No. The use case Steve bugged me about was the ability
> to have some shares (tid's) encrypted and some not on
> the same session. In this case encryption is a property
> of the tid, not the sessionid.

Why is having the ability to do this a good thing? If a client wants  
to do unencrypted traffic it can always set up a new session.

--
James Peach | jpeach at samba.org