[Dovecot] [PATCH] Support GSS-SPNEGO natively
Timo Sirainen
tss at iki.fi
Tue Aug 12 20:11:47 EEST 2008
On Aug 12, 2008, at 2:44 AM, Jason Gunthorpe wrote:
> This is how the SPNEGO works in libapache-mod-auth-kerb-5.3 which
> simply passes SPNEGO packets directly to gssapi if the library is new
> enough. There is even a configure feature test for the gssapi library
> in that packages configure script. Note that Debian etch's standard
> kerb libaries (1.4) are not good enough for this.
Any thoughts on how exactly to detect that it's MIT kerberos (not
Heimdal) and the version is new enough?
> (although don't the gssapi calls block??)
Yes, but it was cleverly hidden so I hadn't thought about it before ;)
So yes, I suppose some day GSSAPI calls should be done in auth worker
processes.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20080812/1e60c115/attachment.bin
More information about the dovecot
mailing list