| commit | e527a1aa73b3fdb86787e9c55f6a01660b4d1a0f | |
| author | Günther Deschner <gd@samba.org> | |
| Wed, 6 May 2009 17:29:01 +0000 (6 19:29 +0200) | ||
| committer | Günther Deschner <gd@samba.org> | |
| Thu, 7 May 2009 11:44:56 +0000 (7 13:44 +0200) | ||
| tree | 2cf5c40b2aaf4bcc2f6a49f80e35929c3b11bbd2 | treesnapshot (tar.gz zip) |
| parent | d0854a690d1ce25a0c4f0ed92a3706a90f12305f | commitdiff |
s3-netlogon: Fix NETLOGON credential chain. Fixes Bug #6099 (Windows 7 joining Samba3) and probably many, many more.
Jeremy, with 9a5d5cc1db0ee60486f932e34cd7961b90c70a56 you alter the in negotiate
flags (which are a pointer to the out negotiate flags assigned in the generated
netlogon server code). So, while you wanted to just set the *out* negflags, you
did in fact reset the *in* negflags, effectively eliminating the
NETLOGON_NEG_STRONG_KEYS bit (formerly known as NETLOGON_NEG_128BIT) which then
caused creds_server_init() to generate 64bit creds instead of 128bit, causing
the whole chain to break. *Please* check.
Guenther
(cherry picked from commit 78754ab2c9b28ea8ab09d3fd1f5450abe721a2c1)
Jeremy, with 9a5d5cc1db0ee60486f932e34cd7961b90c70a56 you alter the in negotiate
flags (which are a pointer to the out negotiate flags assigned in the generated
netlogon server code). So, while you wanted to just set the *out* negflags, you
did in fact reset the *in* negflags, effectively eliminating the
NETLOGON_NEG_STRONG_KEYS bit (formerly known as NETLOGON_NEG_128BIT) which then
caused creds_server_init() to generate 64bit creds instead of 128bit, causing
the whole chain to break. *Please* check.
Guenther
(cherry picked from commit 78754ab2c9b28ea8ab09d3fd1f5450abe721a2c1)
| source3/rpc_server/srv_netlog_nt.c | diffblobblamehistory |