Support DCERPC with krb5 and header signing

Andrew Bartlett abartlet at
Tue Jun 23 16:41:33 MDT 2015

On Tue, 2015-06-23 at 18:34 +0200, Stefan (metze) Metzmacher wrote:
> Hi,
> here're patches to finally use gss_[un]wrap_iov[_length]()
> and support DCERPC header signing in both gssapi/krb5 gensec backends we
> have.
> The heimdal related patches are also proposed upstream, see
> Please review and push.

It took a moment to work out what patches this depended on, but has been
reviewed, and it is in the set of krb5 patches that are in autobuild!

I'm also pleased to note that this would seem to bring us much closer to
unifying gensec_gse and gensec_gssapi.


Andrew Bartlett
Andrew Bartlett             
Authentication Developer, Samba Team
Samba Developer, Catalyst IT

More information about the samba-technical mailing list