Re: squid_kerb_auth spnegohelp library license

Have thrown out the kerberos spnegohelp subfolder due to licensing
issues. See below for reference.

fre 2010-01-08 klockan 20:36 +0100 skrev Henrik Nordström:
> Ok, found the actual license now I think.. MICROSOFT LIMITED PUBLIC
> LICENSE
>
> http://msdn.microsoft.com/en-us/cc300389.aspx#MLPL
>
> as indicated in
>
> http://msdn.microsoft.com/en-us/cc300389.aspx#D
>
> and as one can guess it is not GPL compatible.
>
>
> fre 2010-01-08 klockan 00:00 +0000 skrev Markus Moeller:
> > Hi Henrik,
> >
> > I assumed the same as the others that it can be used freely. This code is
> > only necessary for older Kerberos libraries which do not support SPNEGO, so
> > you may remove it.
> >
> > Markus
> >
> > ----- Original Message -----
> > From: "Henrik Nordström" <henrik_at_henriknordstrom.net>
> > To: "Jiri Skala" <jskala_at_redhat.com>
> > Cc: "Markus Moeller" <huaraz_at_moeller.plus.com>
> > Sent: Thursday, January 07, 2010 9:01 PM
> > Subject: Re: squid_kerb_auth spnegohelp library license
> >
> >
> > > tor 2010-01-07 klockan 11:03 +0100 skrev Jiri Skala:
> > >
> > >> There are sources in helpers/negotiate_auth/squid_kerb_auth/spnegohelp
> > >> that aren't built in but the license is not acceptable for us. Are these
> > >> sources really essential for the helper and must be in tarball?
> > >
> > > Hmm.. right that's a tricky copyright statement.
> > >
> > > That library originates from here:
> > >
> > > http://msdn.microsoft.com/en-us/library/ms995331.aspx
> > >
> > >
> > > When we merged the sources I read that as a permissive license, but I
> > > see now that there is actually no usage license given at all, just "all
> > > rights reserved" and "no warranty".
> > >
> > > The library is essential for the operation of that helper, but I guess
> > > there may be other alternative libraries which could be used instead.
> > >
> > > I guess the best contact for this question is the author of that helper,
> > > Markus Moeller, added as CC on this message.
> > >
> > > Markus, two questions to you:
> > >
> > > a) do you know anything more about what the licensing conditions of that
> > > Microsoft sample code is?
> > >
> > > b) If unceratain, do you know any other spnego parser implementations
> > > which we may use in a way compatible with the GPL license?
> > >
> > > The copyright blob in the spnego parser sources do not grant and rights
> > > of use at all.
> > >
> > > // Copyright (C) 2002 Microsoft Corporation
> > > // All rights reserved.
> > > //
> > > // THIS CODE AND INFORMATION IS PROVIDED "AS IS"
> > > // WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
> > > // OR IMPLIED, INCLUDING BUT NOT LIMITED
> > > // TO THE IMPLIED WARRANTIES OF MERCHANTIBILITY
> > > // AND/OR FITNESS FOR A PARTICULAR PURPOSE.
> > >
> > > and the msdn article the code originates from also does not says
> > > anything about licensing conditions.
> > >
> > > I see that the same code is used in libsmbfs shipped in both NetBSD and
> > > zfs-crypto and a number of other projects, so I guess several others
> > > have assumed that the code is meant to be used freely, but no actual
> > > licensing conditions found anywhere around that code from what I can
> > > tell.
> > >
> > > Regards
> > > Henrik
> > >
> > >
> >
Received on Sat Jan 09 2010 - 01:04:12 MST