Stupid question: Can't someone just look at the MS sample code and
update it to support the updated protocol?

- Danilo

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:kerberos-admin@;MIT.EDU] On Behalf
Of Sam Hartman
Sent: Monday, October 07, 2002 3:21 PM
To: Wyllys Ingersoll
Cc: Actually davidchr; Tony Hoyle; [EMAIL PROTECTED]
Subject: Re: microsoft xp gssapi client talking to solaris8 gssapi
server

>>>>> "Wyllys" == Wyllys Ingersoll <[EMAIL PROTECTED]> writes:

    Wyllys> The problems with the newer MIT GSS samples and the MS
    Wyllys> samples are not due to GSSAPI/SSPI incompatibilities, but
    Wyllys> because MIT added some new "tokens" and flags that the
    Wyllys> client and servers exchange to coordinate the sample
    Wyllys> testing.  Perhaps someone from MIT can explain better what
    Wyllys> they did in the newer code.


Yeah, we sort of assumed that they were sample applications and used
for debugging, so we expanded their functionality in this regard.  We
didn't realize people were using them for interop testing.

On the other hand, we do have an open bug to add back support for the
old protocol.  I'm in the middle of a project where that would
actually be useful (confirming gss_wrap with integrity only works for
rc4-hmac-md5) so I may get around to fixing that bug.


________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
http://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to