[freetds] tds9 and gssapi
Achim Grolms
achim at grolmsnet.de
Wed Nov 7 16:06:58 EST 2007
On Tuesday 06 November 2007, you wrote:
> > The output of gss_import_name() is "output_name", a opaque
> > struture that can be used to pass into
>
> I just realized that I can use getdomainname in order to translate from
> hostname to full qualified hostname...
But why to do so?
passing GSS_NT_HOSTBASED_SERVIVE
to gss_import_name() makes the GSSAPI do this work
internally.
> Currently I support only a single round-trip, server seems to agree but
> it's not that fine...
What's the problem in detail?
Are there any major/minor statuscodes that should be
reported by gss_display_status()?
> Mmmm... a bit more complicated cause these tokens are nested to sql
> packets...
Sure :-D
Initiallly I wrote that the main problem is to know
where to put the GSSAPI-Tokens...
>currently NTLMSSP (without SPNEGO) is the only handled
> authentication after login...
Hmmmm.
Is it sure that the server really suppert Kerberos5 login?
How can that be answered to be really sure what works
and what does not work?
I know, I have promised to to some "reverse engineering"
myself.
But I am too busy at the moment...
I am sorry for beeing less helpful.
Thank you very much for doing that work!
Achim
More information about the FreeTDS
mailing list