12 Jul
2004
12 Jul
'04
5:20 p.m.
Hi,
I've been working on a patch for GSSAPI (Kerberos) support. It seems to work pretty well for authentication (I've tested it with Evolution, fetchmail, and mutt). I have also been working on implementing integrity/confidentiality protection. Unfortunately not many clients support this - the only one I've found really is mutt, which seems to disconnect from the server for some unknown reason not long after a Kerberos-secured conversation. I'm still trying to track that down.
But anyways the patch is far along enough that I think it's worthy of review and testing.
Some todo items:
- Track down bug preventing mutt from working
- Audit integrity proxy a bit more
- Make sure we're handling mechanisms other than Kerberos
- Test with more clients