| commit | 4b683427acea8196cee1c8249ac5f25c98fb568e | |
| author | Andrew Bartlett <abartlet@samba.org> | |
| Tue, 9 Mar 2004 12:37:05 +0000 (9 12:37 +0000) | ||
| committer | Andrew Bartlett <abartlet@samba.org> | |
| Tue, 9 Mar 2004 12:37:05 +0000 (9 12:37 +0000) | ||
| tree | d4905d9872254b91a81aceff6f1473cab3076f8b | treesnapshot (tar.gz zip) |
| parent | 6100210db96e8647c33b4bf67458ce55f28a53e1 | commitdiff |
Commit to HEAD the updates to smb signing code that I was propsing for 3.0.
This code implements 'opportunistic signing' in our client (when the
server supports it, we will use it), and correct downgrading on both
the client and server for the 'enabled' (rather than required) signing
level.
This means that we can actually set 'server signing = yes' and not
have the world fall apart. We had a number of bugs in that code, and
it certainly looks like most of the testing was with the 'requried'
setting.
While the changes are reasonable, I'm putting this into HEAD rather
than 3.0 for the timebeing. SMB signing, like NTLMSSP, tends to have
gotchas in it :-)
(I also need to give it a workout with more than smbclient before I
move it across).
Andrew Bartlett
(This used to be commit 6bad895462cf076a7e917c909e2a461d1b360bf1)
This code implements 'opportunistic signing' in our client (when the
server supports it, we will use it), and correct downgrading on both
the client and server for the 'enabled' (rather than required) signing
level.
This means that we can actually set 'server signing = yes' and not
have the world fall apart. We had a number of bugs in that code, and
it certainly looks like most of the testing was with the 'requried'
setting.
While the changes are reasonable, I'm putting this into HEAD rather
than 3.0 for the timebeing. SMB signing, like NTLMSSP, tends to have
gotchas in it :-)
(I also need to give it a workout with more than smbclient before I
move it across).
Andrew Bartlett
(This used to be commit 6bad895462cf076a7e917c909e2a461d1b360bf1)