[krbdev.mit.edu #8227] git commit
Greg Hudson via RT
rt-comment at krbdev.mit.edu
Tue Aug 4 18:42:34 EDT 2015
Allow missing authenticator checksum with GSSAPI
Some SMB client implementations omit the authenticator checksum. To
interoperate with these clients, a server needs to allow missing
checksums and assume no flags are requested. This is being documented
in MS-KILE as well, as Microsoft does the same.
[ghudson at mit.edu: edited and reformatted comment; edited commit
message summary]
https://github.com/krb5/krb5/commit/0e60d5ce041607cfc7659a8d3198d0f3f8958245
Author: Simo Sorce <simo at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 0e60d5ce041607cfc7659a8d3198d0f3f8958245
Branch: master
src/lib/gssapi/krb5/accept_sec_context.c | 16 +++++++++-------
1 files changed, 9 insertions(+), 7 deletions(-)
More information about the krb5-bugs
mailing list