[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [patch] miscellaneous mechglue stuff
- To: mba2000@ioplex.com
- Subject: Re: [patch] miscellaneous mechglue stuff
- From: Luke Howard <lukeh@PADL.COM>
- Date: Mon, 1 May 2006 10:04:52 +1000
- Cc: abartlet@samba.org, heimdal-discuss@sics.se
- Organization: PADL Software Pty Ltd
- References: <20060427183214.622555ce.mba2000@ioplex.com> <1146373560.6574.20.camel@localhost.localdomain> <20060430020334.7d36597a.mba2000@ioplex.com> <200604300636.k3U6ashi018116@au.padl.com> <20060430112905.09420489.mba2000@ioplex.com> <200604301547.k3UFlGes038355@au.padl.com> <1146417962.6574.93.camel@localhost.localdomain> <20060430161945.5c0dfa5d.mba2000@ioplex.com>
- Reply-To: lukeh@PADL.COM
- Sender: owner-heimdal-discuss@sics.se
- Versions: dmail (bsd44) 2.6d/makemail 2.10
>The change to *accept* MD5 should still be applied of course.
Would it not be better to switch the test around so that CKSUMTYPE_GSSAPI
is tested instead?
if (authenticator->cksum->cksumtype == CKSUMTYPE_GSSAPI) {
ret = gssapi_krb5_verify_8003_checksum(minor_status,
input_chan_bindings,
authenticator->cksum,
&flags,
&fwd_data);
} else {
ret = krb5_verify_checksum(gssapi_krb5_context,
NULL, 0, NULL, 0,
authenticator->cksum);
}
cheers,
-- Luke
--