FreeTDS Development Group

["James K. Lowden" <jklowden AT freetds.org>]

Achim Grolms wrote:
> Idea1: Use an Environmentvariable to enable use of kerberos.
> Hmmm. ugly.
> 
> Idea2: use a "Dummy-Username"  with dummypassword to trigger the use of 
> Kerberos5.
> (Ugly in-band-signalling :-/)
> 
> Idea3: Something that can be put into the configfile?
> 
> Other options available that can be passed from the driver-using
> software to the underlying libs to trigger the use of
> Kerberosauthentication?

Am I missing something?  Absence of a username is sufficient to tell the
library that Kerberos authentication should be used.  

How about:

        If Kerberos is built-in (configured at compile time) and 
        the user provides no username+password pair, then
        consult the Kerberos server.  

Something like:

if (!username) {
        if (HAVE_KERBEROS) {
                if (authenticate()) {
                        Yay!
                } else {
                        kerberos auth failure
                }
        } else {
                username required failure
        }
} else {
        if (authenticate(username)) {
                Yay!
        } else {
                authentication failed
        }
}

--jkl