FreeTDS Development Group

[Achim Grolms <achim AT grolmsnet.de>]

On Tuesday 06 November 2007, you wrote:

> > The output of gss_import_name() is "output_name", a opaque
> > struture that can be used to pass into
>
> I just realized that I can use getdomainname in order to translate from
> hostname to full qualified hostname...

But why to do so?
passing GSS_NT_HOSTBASED_SERVIVE
to gss_import_name() makes the GSSAPI do this work
internally.


> Currently I support only a single round-trip, server seems to agree but
> it's not that fine...

What's the problem in detail?
Are there any major/minor statuscodes that should be
reported by gss_display_status()?

> Mmmm... a bit more complicated cause these tokens are nested to sql
> packets... 

Sure :-D
Initiallly I wrote that the main problem is to know
where to put the GSSAPI-Tokens...

>currently NTLMSSP (without SPNEGO) is the only handled
> authentication after login...

Hmmmm.
Is it sure that the server really suppert Kerberos5 login?
How can that be answered to be really sure what works
and what does not work?

I know, I have promised to to some "reverse engineering"
myself.
But I am too busy at the moment...
I am sorry for beeing less helpful.

Thank you very much for doing that work!

Achim