Support DCERPC with krb5 and header signing

Andrew Bartlett abartlet at samba.org
Tue Jun 23 16:41:33 MDT 2015


On Tue, 2015-06-23 at 18:34 +0200, Stefan (metze) Metzmacher wrote:
> Hi,
> 
> here're patches to finally use gss_[un]wrap_iov[_length]()
> and support DCERPC header signing in both gssapi/krb5 gensec backends we
> have.
> 
> The heimdal related patches are also proposed upstream, see
> https://git.samba.org/?p=metze/heimdal/wip.git;a=shortlog;h=refs/heads/heimdal-for-upstream
> 
> Please review and push.

It took a moment to work out what patches this depended on, but has been
reviewed, and it is in the set of krb5 patches that are in autobuild!

I'm also pleased to note that this would seem to bring us much closer to
unifying gensec_gse and gensec_gssapi.

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba




More information about the samba-technical mailing list