[freetds] tds9 and gssapi
James K. Lowden
jklowden at freetds.org
Wed Nov 14 10:03:15 EST 2007
Achim Grolms wrote:
> Idea1: Use an Environmentvariable to enable use of kerberos.
> Hmmm. ugly.
>
> Idea2: use a "Dummy-Username" with dummypassword to trigger the use of
> Kerberos5.
> (Ugly in-band-signalling :-/)
>
> Idea3: Something that can be put into the configfile?
>
> Other options available that can be passed from the driver-using
> software to the underlying libs to trigger the use of
> Kerberosauthentication?
Am I missing something? Absence of a username is sufficient to tell the
library that Kerberos authentication should be used.
How about:
If Kerberos is built-in (configured at compile time) and
the user provides no username+password pair, then
consult the Kerberos server.
Something like:
if (!username) {
if (HAVE_KERBEROS) {
if (authenticate()) {
Yay!
} else {
kerberos auth failure
}
} else {
username required failure
}
} else {
if (authenticate(username)) {
Yay!
} else {
authentication failed
}
}
--jkl
More information about the FreeTDS
mailing list