-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jay Sprenkle wrote:
> How is the first client 'contacted' and asked to respond?
> I can't see how this is anything but useless. I can't imagine very many
> programs honor this kind of request since I've never even heard of this
> before last week. If the first client doesn't respond to the request
> it would have to degenerate to a standard lock. Is this an OS hack
> designed in for a specific microsoft application?

I said client OS, not program.  It is part of the SMB protocol and the
client operating system includes an SMB implementation.  Under Windows
it is called the SMB redirector.  The specific protocol request is named
oplock break.  Any SMB implementation that uses oplocks (they have to be
specifically requested at time of open by the SMB implementation) also
has to implement the oplock breaks.

Note that if a client refuses to respond to an oplock break, the server
will eventually timeout and break the whole TCP connection (ie forcibly
disconnect the client).

> Degenerate cases? This sounds like something only Microsoft could dream
> up, so I guess degenerate applies... ;)

The degenerate cases are due to poor design of the signing
implementation.  SMB signing as a security solution has so many
loopholes that I don't know why people both.

Roger
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFFpRijmOOfHg372QQRAmW7AJoCjr5wGUTfX7GSn1mrAFAkmO5exwCfTa0w
NXz27LvxqL3Xu0hkgq+wwVw=
=scgT
-----END PGP SIGNATURE-----

-----------------------------------------------------------------------------
To unsubscribe, send email to [EMAIL PROTECTED]
-----------------------------------------------------------------------------

Reply via email to