mirror of
https://github.com/samba-team/samba.git
synced 2025-03-08 04:58:40 +03:00
s3-auth clarify the role of these session keys
This comment can be clarified now the auth subsystem does not use the same structure as the rest of the code. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
This commit is contained in:
parent
1aced1e989
commit
ef69e140d8
@ -38,14 +38,12 @@ struct auth_serversupplied_info {
|
||||
|
||||
struct security_token *security_token;
|
||||
|
||||
/* This is the final session key, as used by SMB signing, and
|
||||
* (truncated to 16 bytes) encryption on the SAMR and LSA pipes
|
||||
* when over ncacn_np.
|
||||
* It is calculated by NTLMSSP from the session key in the info3,
|
||||
* and is set from the Kerberos session key using
|
||||
* krb5_auth_con_getremotesubkey().
|
||||
*
|
||||
* Bottom line, it is not the same as the session keys in info3.
|
||||
/* These are the intermediate session keys, as provided by a
|
||||
* NETLOGON server and used by NTLMSSP to negotiate key
|
||||
* exchange etc (which will provide the session_key in the
|
||||
* auth_session_info). It is usually the same as the keys in
|
||||
* the info3, but is a variable length structure here to allow
|
||||
* it to be omitted if the auth module does not know it.
|
||||
*/
|
||||
|
||||
DATA_BLOB session_key;
|
||||
|
Loading…
x
Reference in New Issue
Block a user