]> git.ipfire.org Git - thirdparty/krb5.git/commit
Allow missing authenticator checksum with GSSAPI
authorSimo Sorce <simo@redhat.com>
Tue, 4 Aug 2015 18:04:14 +0000 (14:04 -0400)
committerGreg Hudson <ghudson@mit.edu>
Tue, 4 Aug 2015 22:36:52 +0000 (18:36 -0400)
commit0e60d5ce041607cfc7659a8d3198d0f3f8958245
tree1b8568d69d1aeaa8809ddbab692f0bb6939b5e08
parent7746beda3b0312216ac3ffa18fa3179f252b15f4
Allow missing authenticator checksum with GSSAPI

Some SMB client implementations omit the authenticator checksum.  To
interoperate with these clients, a server needs to allow missing
checksums and assume no flags are requested.  This is being documented
in MS-KILE as well, as Microsoft does the same.

[ghudson@mit.edu: edited and reformatted comment; edited commit
message summary]

ticket: 8227 (new)
src/lib/gssapi/krb5/accept_sec_context.c