[PATCH] remove ntlm_auth4
simo at samba.org
Fri Nov 25 17:33:39 UTC 2016
On Fri, 2016-11-25 at 15:35 +0100, Volker Lendecke wrote:
> On Fri, Nov 25, 2016 at 03:07:49PM +0100, Michael Adam wrote:
> > I.e. no-one has cancelled your rework of ntlm_auth3, and
> > every single response you got to your removal patch
> > was an ACK.
> Ok, sure, I'm fine with the removal. But for further development I'll
> take a look at extending wbinfo with the squid helper protocols. I
> it as not a good idea to link in gensec and everything else into such
> a tool that is called from squid. wbinfo is designed to be slim,
> ntlm_auth is the kitchen-sink do everything test-tool that can cover
> all authentication corner cases and error injects. We need a separate
> tool that is of lighter weight.
My humble proposal would be to stop developing custom tools for squid
and friends and use published APIs (ie gssapi), take a look at gss-
ntlmssp, if you look at the winbind integration code and the commit
messages it should be clear how winbindd interfaces are inadequate and
should be changed. If not I can definitely write up something.
More information about the samba-technical