4 Commits

Author	SHA1	Message	Date
Andrew Bartlett	cfd0df16b7	r13481: As far as I can tell, my changes in -r 12863 were dangerously untested. ... We do need the gsskrb5_get_initiator_subkey() routine. But we should ensure that we do always get a valid key, to prevent any segfaults. Without this code, we get a different session key compared with Win2k3, and so kerberised smb signing fails. Andrew Bartlett	2007-10-10 13:51:55 -05:00
Andrew Bartlett	ec11870ca1	r12863: As lha suggested to me a while back, it appears that the ... gsskrb5_get_initiator_subkey() routine is bougs. We can indeed use gss_krb5_get_subkey(). This is fortunate, as there was a segfault bug in 'initiator' version. Andrew Bartlett	2007-10-10 13:50:55 -05:00
Andrew Bartlett	e4f2afc343	r10153: This patch adds a new parameter to gensec_sig_size(), the size of the ... data to be signed/sealed. We can use this to split the data from the signature portion of the resultant wrapped packet. This required merging the gsskrb5_wrap_size patch from lorikeet-heimdal, and fixes AES encrption issues on DCE/RPC (we no longer use a static 45 byte value). This fixes one of the krb5 issues in my list. Andrew Bartlett	2007-10-10 13:38:04 -05:00
Heimdal Import User	118be28a7a	r8302: import mini HEIMDAL into the tree	2007-10-10 13:19:33 -05:00