[freetds] tds9 and gssapi
freddy77 at gmail.com
Wed Oct 31 15:29:05 EDT 2007
yesterday I merged patches for tds9 and gss-api. These patches are
disabled that is not "enabled" if --enable-developing is not used during
configure. gss-api is not even compiled in while you cannot setup a tds9
dialog (other code is compiled).
tds9 is stable, but incomplete. The main issue is missing varchar(max)
support (probably client would close connection on such a type :(..
better than core or lose sync :) ). We don't use MARS headers (which is
one of the best improves) and I have some problems with texts (why
server do not return textptr???).
gss-api... the main code is in src/tds/gssapi.c, it works on my
environment but if you see TODO you will find many issue and I didn't
write that currectly server code is hardcoded :).
It's that first time I wrote gss-api code and I don't know kerberos that
much (not counting the problem to configure it with AD). I have some
- how to use spnego in packet?
- how to use multiple authentications, for instance for saying "we
support ntlmssp too" ?
- I didn't understand how to generate a service/instance name instead of
a principal one... could I use gss_import_name directly instead of
krb5_init_context/krb5_parse_name/gss_import_name and how?
More information about the FreeTDS