[PATCH] Allow Huawei Unified Storage System S5500 V3 to join the AD DC

Simo simo at samba.org
Tue Aug 4 01:31:41 UTC 2015


On Tue, 2015-08-04 at 10:59 +1200, Andrew Bartlett wrote:
> This patch allows the Huawei Unified Storage System S5500 V3 to join 
> a
> Samba AD DC.  It appears to have a hand-rolled GSSAPI implementation
> that is compatible with Windows, but not the spec.
> 
> Upstream Heimdal has chosen to be compatible with Windows in this 
> case,
> see: https://github.com/heimdal/heimdal/pull/134
> 
> I acknowledge that concerns were raised in a private forum regarding
> this being unconditional, however as the patch has been accepted as
> presented here into upstream Heimdal, it is best that we import it
> directly. 
> 
> Note: For the MIT Kerberos port, this sadly does mean we will need to
> implement the gssapi_krb5 GENSEC mech, as the fake_gssapi method 
> there
> is currently the only test for this codepath. 

In the second patch you seem to set REAPLY and SEQUENCE flags when the
checksum is NULL, but dochelp reported that you should consider as no
flag is set at all.

Why this difference ?

Simo.




More information about the samba-technical mailing list