[bugs] [illumos gate - Feature #1121] (Resolved) smbsrv should use SPNEGO (outbound authentication)

[illumos bugs]

Issue #1121 has been updated by Gordon Ross.

Status changed from In Progress to Resolved

<pre>
changeset:   13396:c1f01cd09a07
tag:         tip
user:        Gordon Ross <gwr at nexenta.com>
date:        Thu Jul 07 13:45:10 2011 -0400
description:
	1121 smbsrv should use SPNEGO (outbound authentication)
	Reviewed by: Albert Lee <trisk at nexenta.com>
	Reviewed by: Garrett D'Amore <garrett at nexenta.com>
	Reviewed by: Robert Gordon <rbg at openrbg.com>
	Approved by: Garrett D'Amore <garrett at nexenta.com>
</pre>

----------------------------------------
Feature #1121: smbsrv should use SPNEGO (outbound authentication)
https://www.illumos.org/issues/1121

Author: Gordon Ross
Status: Resolved
Priority: Normal
Assignee: Gordon Ross
Category: 
Target version: 
Difficulty: Medium
Tags: needs-triage


When smbsrv connects to AD servers for authentication work, it uses old security protocols.  This can cause some AD servers to refuse connections from this server.

The authentication support in libsmbfs already supports SPNEGO (a.k.a. "extended security") so this feature will replace the smbsrv "smbrdr" library with a thin "shim" on libsmbfs.

Note: the inbound side of this problem is issue 1122
https://www.illumos.org/issues/1122


-- 
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://www.illumos.org/my/account