| commit | de553b52f2bacf54b57b56216fbb91f9108026be | |
| author | Stefan Metzmacher <metze@samba.org> | |
| Wed, 30 Nov 2011 14:17:05 +0000 (30 15:17 +0100) | ||
| committer | Stefan Metzmacher <metze@samba.org> | |
| Wed, 30 Nov 2011 16:03:29 +0000 (30 17:03 +0100) | ||
| tree | e8f7a96a46d7f5621da8c30dbbfe8f0018de56b4 | treesnapshot (tar.gz zip) |
| parent | 4afbda221c20ffa36a1d1e37ef11f86073a49da6 | commitdiff |
s4:gensec/spnego: only try the mechs that match the client given ones
Windows-Members of NT4/Samba3 domains, send
MechTypes:
1.3.6.1.4.1.311.2.2.10 [NTLMSSP]
1.2.840.48018.1.2.2 [krb5 broken]
1.2.840.113554.1.2.2 [krb5]
MechToken for NTLMSSP.
This patch makes sure we start NTLMSSP with the given MechToken,
instead of trying to pass the NTLMSSP MechToken to the krb5 backend
first. As that would fail the authentication with an error
instead of trying fallbacks.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Nov 30 17:03:29 CET 2011 on sn-devel-104
Windows-Members of NT4/Samba3 domains, send
MechTypes:
1.3.6.1.4.1.311.2.2.10 [NTLMSSP]
1.2.840.48018.1.2.2 [krb5 broken]
1.2.840.113554.1.2.2 [krb5]
MechToken for NTLMSSP.
This patch makes sure we start NTLMSSP with the given MechToken,
instead of trying to pass the NTLMSSP MechToken to the krb5 backend
first. As that would fail the authentication with an error
instead of trying fallbacks.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Nov 30 17:03:29 CET 2011 on sn-devel-104
| source4/auth/gensec/spnego.c | diffblobblamehistory |