-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Andreas wrote:
| On a related note, I'm surprised at the amount of people | being hit by this bug, since, to my understanting, it | only affects windows installations without strong cryptography | support, which means old service packs or none.
I've looked into this some more and it could just be a different in the way that non-us windows servers operate. We only ask for AUTH_PIPE_SEAL in winbuindd' schannel code. All of my servers include the nonce for sealing in the verfier returned from the server as well. But apparently non-us servcers don't.
The only way I could reproduce this was to use a unpatched 2k DC. But everyone of the people who reported this bug (that I can remember) where outside the US.
Go figure....
cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFArMq/IR7qMdg1EfYRAoKkAKD0gd+5CnNMeED/1/YtxLUkxgI0vACghEFw aH3gViDVWhpp6r/0lfYP+lE= =qSFL -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
