[PATCH] Allow Huawei Unified Storage System S5500 V3 to join the AD DC

[Andrew Bartlett]

This patch allows the Huawei Unified Storage System S5500 V3 to join a
Samba AD DC.  It appears to have a hand-rolled GSSAPI implementation
that is compatible with Windows, but not the spec.

Upstream Heimdal has chosen to be compatible with Windows in this case,
see: https://github.com/heimdal/heimdal/pull/134

I acknowledge that concerns were raised in a private forum regarding
this being unconditional, however as the patch has been accepted as
presented here into upstream Heimdal, it is best that we import it
directly. 

Note: For the MIT Kerberos port, this sadly does mean we will need to
implement the gssapi_krb5 GENSEC mech, as the fake_gssapi method there
is currently the only test for this codepath. 

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   
https://catalyst.net.nz/services/samba




-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-gensec-Add-an-option-emulating-another-mode-a-client.patch
Type: text/x-patch
Size: 2556 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20150804/49731a4a/0001-gensec-Add-an-option-emulating-another-mode-a-client.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-heimdal-gssapi-Allow-a-NULL-authenticator.patch
Type: text/x-patch
Size: 3950 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20150804/49731a4a/0002-heimdal-gssapi-Allow-a-NULL-authenticator.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-selftest-Add-test-for-GSSAPI-with-no-authenticator-c.patch
Type: text/x-patch
Size: 2588 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20150804/49731a4a/0003-selftest-Add-test-for-GSSAPI-with-no-authenticator-c.bin>