[PATCH] Changes to Samba3 to allow login with NTLM and Kerberos in s3compat

Andrew Bartlett abartlet at samba.org
Sun May 9 05:28:53 MDT 2010


On Sat, 2010-05-08 at 21:56 +1000, Andrew Bartlett wrote:
> On Fri, 2010-05-07 at 22:50 +1000, Andrew Bartlett wrote:
> > These attached patches I wish to propose to Samba3 to make it easier to
> > build s3compat, and to maintain it into the future.
> > 
> > Regardless of if we choose to go with s3compat, I think these are useful
> > cleanups. 
> > 
> > With these patches in, other code in the s3compat branch allows logins
> > using either NTLM or Kerberos to the Samba3 file server hosted in
> > Samba4.  I actually think this is pretty amazing, and has only been so
> > practical because of the long, tedious work done to ensure that the IDL
> > and many other building block structures are identical throughout
> > Samba. 
> > 
> > (The patches are posted here for review.  I hope to test them both -
> > particularly the kerberos one - more, but I'm fighting Samba4 bugs to
> > get the test environment going). 
> 
> I've verified the net ads kerberos pac command, and Samba3 as a domain
> member getting Kerberos tickets, as well as NTLM and Kerboros logins. 
> 
> All the auth changes I'm hoping to have merged are being kept in my
> s3auth-rework branch.  
> 
> Could someone please review these changes so I can merge them?

BTW, if someone else is interested in the s3comapt work, I would really
like to pair-program or do review/merge cycles with another developer.  

Otherwise, it would be good to at least establish a protocol by which I
can get some of these interface changes merged in a predictable
timeframe.  

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100509/f0b6d4ab/attachment.pgp>


More information about the samba-technical mailing list