[prev in list] [next in list] [prev in thread] [next in thread] 

List:       pamldap
Subject:    Re: [pamldap] PAM for Windows NT/2000
From:       Luke Kenneth Casson Leighton <lkcl () samba-tng ! org>
Date:       2001-08-30 10:59:29
[Download RAW message or body]

On Thu, Aug 30, 2001 at 10:35:30AM +1000, Luke Howard wrote:
> 
> >anyway: that was an additional kerberos encryption method
> >that assisted with a 'transition' to native kerberos5
> >authentication / encrpytion.
> 
> Is that arcfour-hmac-md5? Heimdal supports this:
 
yes, that's the one.  it's been added?

fantasti!

curious to know if it was in fact exactly to spec,
because it's subtly different from the netlogon
SChannel security method in TNG.

hm.  interesting.  can't spot the difference
(draft-brezak-win2k-krb-rc4-hmac-02.txt)

... *click*.

ah, i wonder if those constants are for real
["signaturekey"] :) :)


> | Changes in release 0.3a:
> |
> |  * implement arcfour-hmac-md5 to interoperate with W2K
> 
> -- Luke
> --
> Luke Howard | lukehoward.com
> PADL Software | www.padl.com

[prev in list] [next in list] [prev in thread] [next in thread]