sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-10-24 15:33:20 +03:00
Code Activity

r10153: This patch adds a new parameter to gensec_sig_size(), the size of the

Browse Source 
data to be signed/sealed.  We can use this to split the data from the
signature portion of the resultant wrapped packet.

This required merging the gsskrb5_wrap_size patch from
lorikeet-heimdal, and fixes AES encrption issues on DCE/RPC (we no
longer use a static 45 byte value).

This fixes one of the krb5 issues in my list.

Andrew Bartlett
This commit is contained in:
Andrew Bartlett
2005-09-11 11:19:02 +00:00
committed by Gerald (Jerry) Carter
parent b9695d5e7c
commit e4f2afc343
14 changed files with 226 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
source/rpc_server/dcesrv_auth.c
View File

@@ -394,8 +394,8 @@ BOOL dcesrv_auth_response(struct dcesrv_call_state *call,
return False;
}
/* pad to 8 byte multiple */
dce_conn->auth_state.auth_info->auth_pad_length = NDR_ALIGN(ndr, 8);
/* pad to 16 byte multiple, match win2k3 */
dce_conn->auth_state.auth_info->auth_pad_length = NDR_ALIGN(ndr, 16);
ndr_push_zero(ndr, dce_conn->auth_state.auth_info->auth_pad_length);
payload_length = ndr->offset - DCERPC_REQUEST_LENGTH;
@@ -409,7 +409,8 @@ BOOL dcesrv_auth_response(struct dcesrv_call_state *call,
} else {
dce_conn->auth_state.auth_info->credentials
= data_blob_talloc(call, NULL,
gensec_sig_size(dce_conn->auth_state.gensec_security));
gensec_sig_size(dce_conn->auth_state.gensec_security,
payload_length));
}
/* add the auth verifier */