Kerberos Ticket Forwarding Patch/Update (3.2)

[Andrew Bartlett]

On Wed, 2008-07-30 at 23:32 -0400, Derrick Schommer wrote:
> Andrew,
> 
> I'm looking into the gss API, honestly, I've never used them before so there
> is a bit of a learning curve, there seems to be no great documentation to
> build a gss security context with a GSS Checksum.

That's because you are not meant to hand-build it.  Your system GSSAPI
library should do it.  The fact that we did it in Samba3 is not a good
example.  Samba4 has taken the route of using real GSSAPI for this
reason. 

I realise this change is not what you were hoping to do, but I just want
it noted that doing this by hand is always going to cause problems. 

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20080731/baf0c983/attachment.bin