[PATCH] Add support for using server supplied principal (mic option)

Andrew Bartlett abartlet at samba.org
Sun Aug 24 22:38:12 GMT 2008


On Sun, 2008-08-24 at 19:40 +0400, Q (Igor Mammedov) wrote:
> Add support for using server supplied principal (mic option)

As this is a non-standard extension, and has nasty security properties
(connect to one server name, but get a ticket to a completely different
name), shouldn't we be trying to use the server-supplied principal less,
rather than more?  (Windows clients have never used it)

Andrew Bartlett
-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20080825/8f965b0f/attachment.bin


More information about the samba-technical mailing list