[PATCH] Add support for using server supplied principal (mic option)

Igor Mammedov niallain at gmail.com
Mon Aug 25 09:03:35 GMT 2008

Love Hörnquist Åstrand wrote:
> 25 aug 2008 kl. 02.25 skrev Jeff Layton:
>> So that I understand correctly, what exactly is the risk of using the
>> server-provided principal?
> I'm not saying that you shouldn't commit the fix if you think i helps  
> interopability, but we should fix all the components so we get a  
> secure solution that works with msft client/server, at least some day.
> Love

So what we will do?
Shall I make it disabled by default and add an option to cifs.upcall to
enable it or we just stick to a secure behavior and forget about servers
with several names in DNS and the only one in ADS?


Best regards,

Igor Mammedov,
niallain "at" gmail.com

More information about the samba-technical mailing list