[Patches] The way to remove gensec_update_ev()

Stefan Metzmacher metze at samba.org
Sat Jun 17 10:29:03 UTC 2017


Am 17.06.2017 um 02:05 schrieb Andrew Bartlett:
> On Sat, 2017-06-17 at 01:23 +0200, Stefan Metzmacher wrote:
>> Am 15.06.2017 um 05:11 schrieb Andrew Bartlett:
>>> On Wed, 2017-06-14 at 17:39 +0200, Stefan Metzmacher wrote:
>>>> Hi,
>>>>
>>>> just for the record:
>>>> https://git.samba.org/?p=metze/samba/wip.git;a=shortlog;h=refs/heads/
>>>> master3-gensec
>>
>> Here have basic support for NTLMSSP for trusts.
> 
> Very interesting!  I'm a bit nervous about it only supporting NETLOGON
> and not LDAP et al, but I know this is WIP and am assuming this is just
> a part-way point. 

It's not only netlogon, see
https://git.samba.org/?p=metze/samba/wip.git;a=commitdiff;h=7ef9b3c5ebf3
and
https://git.samba.org/?p=metze/samba/wip.git;a=commitdiff;h=576792b6baad

So the auth stack is implemented, we just need:
- the correct routing in winbind
- sid filtering (for kerberos and NTLMSSP)
- lsa_lookup_sids/names passing to winbindd


> Done!
> 
> Reviewed-by: Andrew Bartlett <abartlet at samba.org>

Thanks!

metze


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170617/589c1123/signature.sig>


More information about the samba-technical mailing list