5 Commits

Author	SHA1	Message	Date
Andrew Bartlett	0132312124	r15515: Syncronsise with current lorikeet-heimdal. ... Andrew Bartlett	2007-10-10 14:05:45 -05:00
Andrew Bartlett	120374f5f9	r15484: Make accept_security_context() more compatible with how Samba3 (and ... similarly built clients) behave. This is better than just ignoring the checksum, if it isn't the GSSAPI checksum. (Samba4 clients in Samba3 mode use more than just the MD5 checksum, and will use a signed AES checksum if available. Actual samba3 may well do the same in future, against a suitable KDC). Also a change for easier debugging of checksum issues. Andrew Bartlett	2007-10-10 14:05:39 -05:00
Andrew Bartlett	ef5604b877	r15481: Update heimdal/ to match current lorikeet-heimdal. ... This includes many useful upstream changes, many of which should reduce warnings in our compile. It also includes a change to the HDB interface, which removes the need for Samba4/lorikeet-heimdal to deviate from upstream for hdb_fetch(). The new flags replace the old entry type enum. (This required the rework in hdb-ldb.c included in this commit) Andrew Bartlett	2007-10-10 14:05:39 -05:00
Andrew Bartlett	e60cdb63fb	r11477: This seems really nasty, but as I understand it an attacker cannot ... change this checksum, as it is inside the encrypted packets. Where the client (such as Samba3) fakes up GSSAPI, allow it to continue. We can't rid the world of all Samba3 and similar clients... Andrew Bartlett	2007-10-10 13:45:42 -05:00
Heimdal Import User	118be28a7a	r8302: import mini HEIMDAL into the tree	2007-10-10 13:19:33 -05:00