r10291: The patch optionally (off by default, not available in all cases) allows
commitf6a645644127ae695a9f7288e0a469f2eb7f3066
authorAndrew Bartlett <abartlet@samba.org>
Sat, 17 Sep 2005 09:46:20 +0000 (17 09:46 +0000)
committerGerald (Jerry) Carter <jerry@samba.org>
Wed, 10 Oct 2007 18:38:13 +0000 (10 13:38 -0500)
tree8f56a53eb1a3e16be1109ae23c79308fb9179a7d
parent1a833690b8fd9a22169882c41704d24f2d52b2d9
r10291: The patch optionally (off by default, not available in all cases) allows
Samba to use the target principal name supplied in the mechTokenMIC of
an SPNEGO negTokenInit.

This isn't a great idea for security reasons, but is how Samba3 behaves,
and allows kerberos to function more often in some environments.  It is
only available for CIFS session setups, due to the ordering of the
exchange.

Andrew Bartlett
source/auth/gensec/gensec.c
source/auth/gensec/gensec_gssapi.c
source/auth/gensec/gensec_krb5.c
source/auth/gensec/spnego.c
source/param/loadparm.c