cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: [PATCH] SF bug #1302: HTTP Auth Negotiate sends Kerberos token instead of SPNEGO token

From: Michael Osipov <1983-01-06_at_gmx.net>
Date: Tue, 15 Jul 2014 12:00:43 +0200

Am 2014-07-14 23:27, schrieb Steve Holme:
> On Mon, 14 Jul 2014, Michael Osipov wrote:
> [...]

Steve,

I'll simply watch your work on curl and will drop in my ideas. If you
plan to introduce improvements, please do hot hesitate laying them out
to the list, I'll respond.

>> Let's take the curl LDAP code for instance, it obviously uses
>> native Windows code or OpenLDAP where both already can use SASL
>> underneath if you performs SASL bind but that code does only a
>> simple bind. Leaving all SASL features behind. Options like
>> --digest, --ntlm, --negotiate do not work basically.
>
> Unfortunately yes - that is something I would like to sort out once
> I've finished off some of my work in the email protocols - I would
> like to see support for GSSAPI (the mechanism) in there first ;-)

That is highly desired. I think we have several use cases, where we
would like to pull out data from the Active Directory on a daily basis.
GSS-API would give us the ability to automate that stuff completely --
moreover, for some C programs curl would provide a uniform interface.

Michael
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-07-15