Skip to Content.
Sympa Menu

freetds - Re: [freetds] tds9 and gssapi

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: "James K. Lowden" <jklowden AT freetds.org>
  • To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] tds9 and gssapi
  • Date: Wed, 14 Nov 2007 10:03:15 -0500

Achim Grolms wrote:
> Idea1: Use an Environmentvariable to enable use of kerberos.
> Hmmm. ugly.
>
> Idea2: use a "Dummy-Username" with dummypassword to trigger the use of
> Kerberos5.
> (Ugly in-band-signalling :-/)
>
> Idea3: Something that can be put into the configfile?
>
> Other options available that can be passed from the driver-using
> software to the underlying libs to trigger the use of
> Kerberosauthentication?

Am I missing something? Absence of a username is sufficient to tell the
library that Kerberos authentication should be used.

How about:

If Kerberos is built-in (configured at compile time) and
the user provides no username+password pair, then
consult the Kerberos server.

Something like:

if (!username) {
if (HAVE_KERBEROS) {
if (authenticate()) {
Yay!
} else {
kerberos auth failure
}
} else {
username required failure
}
} else {
if (authenticate(username)) {
Yay!
} else {
authentication failed
}
}

--jkl






Archive powered by MHonArc 2.6.24.

Top of Page