r19635: It appears that under CFX, different keys are used in each direction

(or something like that).

In any case, we need to stick with the initiator subkey for now, until
we figure out what Vista uses for the CIFS session key.

Andrew Bartlett

diff --git a/source/auth/gensec/gensec_gssapi.c b/source/auth/gensec/gensec_gssapi.c
index 7094692fb2984153fe4306dc926e630d328539d4..9f796dc9d12d2a470abbc1fc9aa9cafa34b4431e 100644 (file)
--- a/source/auth/gensec/gensec_gssapi.c
+++ b/source/auth/gensec/gensec_gssapi.c
@@ -1123,9 +1123,9 @@ static NTSTATUS gensec_gssapi_session_key(struct gensec_security *gensec_securit
                return NT_STATUS_OK;
        }
 
-       maj_stat = gsskrb5_get_subkey(&min_stat, 
-                                     gensec_gssapi_state->gssapi_context,
-                                     &subkey);
+       maj_stat = gsskrb5_get_initiator_subkey(&min_stat, 
+                                               gensec_gssapi_state->gssapi_context,
+                                               &subkey);
        if (maj_stat != 0) {
                DEBUG(1, ("NO session key for this mech\n"));
                return NT_STATUS_NO_USER_SESSION_KEY;