Vista CFX join and 'out of order' GSSAPI messages

Andrew Bartlett abartlet at samba.org
Wed Jul 23 04:36:37 GMT 2008


On Tue, 2008-07-22 at 19:16 +0100, Love Hörnquist Åstrand wrote:
> Hello Andrew,
> 
> The DCE-STYLE patches where from metze (I think)
> 
> Also, just to confuse us, the seq number might be diffrent for RC4 and  
> AES
> 
> Does it work if you change the seq number to one larger in the DCE-RPC  
> case, near the end of acceptor_wait_for_dcestyle() is the remote seq  
> number reset.
> 
> Love

No, it now fails with a checksum error.  Could the CFX crypto be
stateful, from the extra AP-REP?

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20080723/807752fa/attachment.bin


More information about the samba-technical mailing list