[PATCH] Use krb5_wrap function in gensec_krb5
Andrew Bartlett
abartlet at samba.org
Mon Aug 29 09:23:07 UTC 2016
On Tue, 2016-08-16 at 16:53 +0200, Andreas Schneider wrote:
> Hello,
>
> I have a patchset which mostly converts gensec_krb5 to use not
> implementation
> specific code but what we have in krb5_wrap. I've already completely
> convert
> gensec_krb5 to MIT Kerberos but it doesn't work yet. I need to see
> what is
> going wrong. However with the patchset attached it still works with
> Heimdal.
>
> I've run some tests to verify it works:
>
> samba4.rpc.lsa.secrets (uses fake_gssapi_krb5)
> samba4.blackbox.passwords (tests kpasswd server which uses
> gensec_krb5)
>
>
> Please review carefully!
Have you run tests against Windows?
That is the only thing I would need beyond the re-read I've done to
give a review. (I have to ask because these things are really easy to
break symmetrically).
Thanks,
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
More information about the samba-technical
mailing list