[PATCH] s3-ntlm_auth: Fix gss-spnego-client to work with gss-spnego

Christof Schmitt christof.schmitt at us.ibm.com
Tue Jan 31 11:24:08 MST 2012


Hi,

i am working on moving the call to ads_verify_ticket from
ntlm_auth to winbindd. While trying to test the ntlm_auth client
and server mode together i found that the data format is not
compatible. The attached patch changes the client mode to be
compatible with the server mode. With this change i can run the
Kerberos authentication successfully by starting the two
processes

ntlm_auth --helper-protocol=gss-spnego
ntlm_auth --username=Administrator --domain=X.COM 
--helper-protocol=gss-spnego-client --password=yy

, sending YR to the server and then copying the messages between
ntlm_auth client and server process.

Christof

Christof Schmitt || IBM || SONAS System Development || Tucson, AZ
christof.schmitt at us.ibm.com  ||  +1-520-799-2469  (T/L: 321-2469)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-s3-ntlm_auth-Fix-gss-spnego-client-to-work-with-gss-.patch
Type: application/octet-stream
Size: 2922 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120131/9628b7ca/attachment.obj>


More information about the samba-technical mailing list