Am 27.06.21 um 23:03 schrieb Steve French via samba-technical: > Here is a WIP patch for negotiating optional signing negotiate context > (which will allow negotiating faster GMAC packet signing if server > supports it). This patch handles enabling requesting it during > negotiate protocol (set module parm "enable_GMAC_signing" to 1) and > parsing the negotiate protocol response. Please drop the GMAC part and negotiate CMAC and HMAC-SHA256 for now. The GMAC signing has a bug with Cancel PDUs in Windows 2022 (client and server use a different nonce, the client uses the MID of the original request, while sending a MID=0 on the wire, then server uses MID=0 for the nonce and returns ACCESS_DENIED). metze
Attachment:
OpenPGP_signature
Description: OpenPGP digital signature
