Andrew Bartlett bb7806283e s3-libads Default to NOT using the server-supplied principal from SPNEGO ... This principal is not supplied by later versions of windows, and using it opens up some oportunities for man in the middle attacks. (Becuase it isn't the name being contacted that is verified with the KDC). This adds the option 'client use spnego principal' to the smb.conf (as used in Samba4) to control this behaivour. As in Samba4, this defaults to false. Against 2008 servers, this will not change behaviour. Against earlier servers, it may cause a downgrade to NTLMSSP more often, in environments where server names are not registered with the KDC as servicePrincipalName values. Andrew Bartlett		2010-12-10 16:08:30 +11:00
..
ads_ldap_protos.h	s3: Remove unused ads_search_retry_extended_dn	2010-11-20 14:42:44 +01:00
ads_proto.h	s3: Make ads_ranged_search_internal static	2010-11-20 14:42:44 +01:00
ads_status.c
ads_status.h
ads_struct.c
authdata.c
cldap.c
cldap.h
disp_sec.c
dns.c
dns.h
kerberos_keytab.c
kerberos_proto.h
kerberos_util.c
kerberos_verify.c
kerberos.c
krb5_errs.c
krb5_setpw.c
ldap_printer.c
ldap_schema.c	s3: Remove unused ads_get_attrname_by_oid	2010-11-20 14:42:44 +01:00
ldap_schema.h	s3: Remove unused ads_get_attrname_by_oid	2010-11-20 14:42:44 +01:00
ldap_user.c
ldap_utils.c	s3: Make ads_ranged_search_internal static	2010-11-20 14:42:44 +01:00
ldap.c	libcli/security Provide a common, top level libcli/security/security.h	2010-10-12 05:54:10 +00:00
ndr.c
sasl_wrapping.c
sasl.c	s3-libads Default to NOT using the server-supplied principal from SPNEGO	2010-12-10 16:08:30 +11:00
sitename_cache.c
sitename_cache.h
util.c