[krbdev.mit.edu #8227] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Tue Aug 4 18:42:34 EDT 2015


Allow missing authenticator checksum with GSSAPI

Some SMB client implementations omit the authenticator checksum.  To
interoperate with these clients, a server needs to allow missing
checksums and assume no flags are requested.  This is being documented
in MS-KILE as well, as Microsoft does the same.

[ghudson at mit.edu: edited and reformatted comment; edited commit
message summary]

https://github.com/krb5/krb5/commit/0e60d5ce041607cfc7659a8d3198d0f3f8958245
Author: Simo Sorce <simo at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 0e60d5ce041607cfc7659a8d3198d0f3f8958245
Branch: master
 src/lib/gssapi/krb5/accept_sec_context.c |   16 +++++++++-------
 1 files changed, 9 insertions(+), 7 deletions(-)



More information about the krb5-bugs mailing list