squid_kerb_auth should be able to handle pure GSSAPI as well as SPNEGO
blobs. I did see in in some Windows environments, but is there an RFC for
Kerberos like there is for Negotiate ?
Markus
"Henrik Nordström" <henrik_at_henriknordstrom.net> wrote in message
news:1324342293.21380.5.camel_at_henriknordstrom.net...
> lör 2011-12-17 klockan 16:09 +1300 skrev Amos Jeffries:
>
>> It seems we should be relaying Kerberos but not advertising (lack of
>> specific module). Should it be advertised as a separate mechanism to
>> Negotiate?
>
> Yes it's a separate scheme named Kerberos. But other than that it can
> share all of negotiate. The same helper protocol & states. And quite
> likely even same helper in several cases even if the blobs differ.
> (helper dependent if it accepts both SPNEGO wrapped GSSAPI and bare
> GSSAPI)
>
> Regards
> Henrik
>
>
Received on Tue Dec 20 2011 - 23:52:55 MST
This archive was generated by hypermail 2.2.0 : Thu Dec 22 2011 - 12:00:07 MST