Start of KDC trust work in Samba4

Stefan (metze) Metzmacher metze at samba.org
Thu Jul 31 15:33:50 GMT 2008


Andrew Bartlett schrieb:
> I'm awaiting clarification of some things from Microsoft, but I just
> wanted to post the patch I have so far towards making the Samba4 KDC
> work with trusted realms.  The main challenge at this point will be
> converting the 'unicode' password in the trustAuthIncoming and
> trustAuthOutgoing into kerberos keys.  Microsoft uses very random data
> here, that may not actually produce valid UTF8 when converted.
> 
> Andrew Bartlett
> 

there's usage of HDB_LDB_ENT_TYPE_KRBTGT where it should be
HDB_LDB_ENT_TYPE_TRUST...

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : http://lists.samba.org/archive/samba-technical/attachments/20080731/b55b77fd/signature.bin


More information about the samba-technical mailing list