closer to delegated credentials on samba4
Amin Azez
azez at ufomechanic.net
Tue Sep 25 13:40:19 GMT 2007
* Andrew Bartlett wrote, On 24/09/07 22:54:
> On Mon, 2007-09-24 at 12:50 +0100, Amin Azez wrote:
>
>> I may have got confused over the direction in which delegation works.
>>
>
> I think you want spoofing :-)
>
> Delegated credentials works when the client knows it's talking to
> machine1, but the files happen to be elsewhere, on a machine the client
> doesn't know about.
>
That suits me.
> However, don't despair. There are ways to use MSDFS to make clients
> change which machine they are talking to. Likewise, you could steal the
> target server's keytab. Work on getting it working when the client is
> 'in the know', and I'll try to give you a hand with the subtle tricks
> later.
>
Well, I'll get on with the caching for the time being.
Sam
More information about the samba-technical
mailing list