On Tue, Aug 12, 2008 at 10:27:40AM +0200, Angel Marin wrote:
Jason Gunthorpe wrote:
I cooked this up while trying to figure out why thunderbird on Windows w/ SSPI was not working, but it turned out thunderbird does not use it, so I haven't been able to test it yet. I'm presenting it for discussion only, unless someone else can try it :)
thunderbird does all combinations of GSS auth w/ & w/o SSPI I've ever tried; it's just a pain to find the correct combination of network.negotiate-auth.* and network.auth.use-sspi settings for any given case :) (plus enabling secure auth for the TB account at test)
Really? I was looking through the source to TB and I can't find where it would use AUTH=GSS-SPNEGO..
For instance in mailnews/imap/src/nsImapServerResponseParser.cpp
Where it parses the CAPABILITY reply it only looks for AUTH=GSSAPI
Then when it goes to do the auth DoGSSAPIStep1 creates a sasl-gssapi which creates either a kerb-gss or a kerb-sspi and both of those set PACKAGE_KERBEROS to disable SPNEGO.
I've been assuming AUTH=GSS-SPNEGO is only used by outlook?
Jason