Skip to Content.
Sympa Menu

freetds - Re: [freetds] tds9 and gssapi

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: Achim Grolms <achim AT grolmsnet.de>
  • To: "ZIGLIO, Frediano, VF-IT" <Frediano.Ziglio AT vodafone.com>
  • Cc: freetds AT lists.ibiblio.org
  • Subject: Re: [freetds] tds9 and gssapi
  • Date: Wed, 7 Nov 2007 22:06:58 +0100

On Tuesday 06 November 2007, you wrote:

> > The output of gss_import_name() is "output_name", a opaque
> > struture that can be used to pass into
>
> I just realized that I can use getdomainname in order to translate from
> hostname to full qualified hostname...

But why to do so?
passing GSS_NT_HOSTBASED_SERVIVE
to gss_import_name() makes the GSSAPI do this work
internally.


> Currently I support only a single round-trip, server seems to agree but
> it's not that fine...

What's the problem in detail?
Are there any major/minor statuscodes that should be
reported by gss_display_status()?

> Mmmm... a bit more complicated cause these tokens are nested to sql
> packets...

Sure :-D
Initiallly I wrote that the main problem is to know
where to put the GSSAPI-Tokens...

>currently NTLMSSP (without SPNEGO) is the only handled
> authentication after login...

Hmmmm.
Is it sure that the server really suppert Kerberos5 login?
How can that be answered to be really sure what works
and what does not work?

I know, I have promised to to some "reverse engineering"
myself.
But I am too busy at the moment...
I am sorry for beeing less helpful.

Thank you very much for doing that work!

Achim




Archive powered by MHonArc 2.6.24.

Top of Page