-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andreas wrote:

| On a related note, I'm surprised at the amount of people
| being hit by this bug, since, to my understanting, it
| only affects windows installations without strong cryptography
| support, which means old service packs or none.

I've looked into this some more and it could just be a
different in the way that non-us windows servers operate.
We only ask for AUTH_PIPE_SEAL in winbuindd' schannel code.
All of my servers include the nonce for sealing in the
verfier returned from the server as well.  But apparently
non-us servcers don't.

The only way I could reproduce this was to use a unpatched
2k DC.  But everyone of the people who reported this bug
(that I can remember) where outside the US.

Go figure....




cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFArMq/IR7qMdg1EfYRAoKkAKD0gd+5CnNMeED/1/YtxLUkxgI0vACghEFw
aH3gViDVWhpp6r/0lfYP+lE=
=qSFL
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to