]> git.ipfire.org Git - thirdparty/samba.git/commit
s4:dns_server: correctly sign dns update responses with gss-tsig like Windows
authorStefan Metzmacher <metze@samba.org>
Thu, 30 May 2024 12:39:28 +0000 (14:39 +0200)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 6 Jun 2024 02:13:33 +0000 (02:13 +0000)
commit76fec2668e73b9d15447abee551d5c04148aaf27
treeb9adddfb2b0465d8c0dd7be19353bc48d47f02e8
parentdb350bc573b378fb0615bdd8592cc9c62f6db146
s4:dns_server: correctly sign dns update responses with gss-tsig like Windows

This means we no longer generate strange errors/warnings
in the Windows event log nor in the nsupdate -g output.

Note: this is a only difference between gss-tsig and
the legacy gss.microsoft.com algorithms.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13019

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
selftest/knownfail.d/dns_tkey
source4/dns_server/dns_crypto.c