[freetds] tds9 and gssapi

James K. Lowden jklowden at freetds.org
Wed Nov 14 10:03:15 EST 2007


Achim Grolms wrote:
> Idea1: Use an Environmentvariable to enable use of kerberos.
> Hmmm. ugly.
> 
> Idea2: use a "Dummy-Username"  with dummypassword to trigger the use of 
> Kerberos5.
> (Ugly in-band-signalling :-/)
> 
> Idea3: Something that can be put into the configfile?
> 
> Other options available that can be passed from the driver-using
> software to the underlying libs to trigger the use of
> Kerberosauthentication?

Am I missing something?  Absence of a username is sufficient to tell the
library that Kerberos authentication should be used.  

How about:

	If Kerberos is built-in (configured at compile time) and 
	the user provides no username+password pair, then
	consult the Kerberos server.  

Something like:

if (!username) {
	if (HAVE_KERBEROS) {
		if (authenticate()) {
			Yay!
		} else {
			kerberos auth failure
		}
	} else {
		username required failure
	}
} else {
	if (authenticate(username)) {
		Yay!
	} else {
		authentication failed
	}
}

--jkl




More information about the FreeTDS mailing list