[PATCH] support for kerberos in plugin DC code

Andrew Bartlett abartlet at samba.org
Mon Aug 1 17:01:13 MDT 2011


On Fri, 2011-07-29 at 17:09 +0200, Stefan (metze) Metzmacher wrote:
> >> I'd like you to give quite some time to review and decide if it is ok.
> >> I have been opposed on introducing gensec in s3 for a few reasons. One
> >> is dependencies, the other is that IIRC gensec does not create new event
> >> loops bu allows nesting of loops. That is something too dangerous for
> >> the file server imho.
> > 
> > Yes, this needs a lot of review, I hope to get some time in the next days.
> 
> Here're my first result, but I'll do more review on monday:

I've addressed all these issues (including the
auth_ntlmssp_steal_session_info(), but not removing the auth4_context
for the reasons I've explained).  Can you please let me know soon if you
have any further comments that cannot be addressed in-tree, as I would
like to move forward with this work.

Simo,

You asked for time to review these changes.  Have you found that time,
or can we work our any remaining issues after this lands in master?

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org




More information about the samba-technical mailing list