*Synopsis*: Add GSSAPI/KRB5 authentication in Xorg CR 6666747 changed on Mar 7 2008 by <User 1-5Q-9041>
=== Field ============ === New Value ============= === Old Value ============= Description New Note ====================== =========================== =========================== *Change Request ID*: 6666747 *Synopsis*: Add GSSAPI/KRB5 authentication in Xorg Product: solaris Category: xserver Subcategory: client_libs Type: RFE Subtype: Functionality Status: 1-Dispatched Substatus: Priority: 3-Medium Introduced In Release: Introduced In Build: Responsible Engineer: <User 1-4T6V8Z> Keywords: authentication, gssapi, kerberos === *Description* ============================================================ Xorg contains an old and unmaintained Kerberos 5 authentication implementation, which no longer compiles with current distributions of MIT Kerberos5. This authentication mechanism is useful, and the Xorg implementation should be fixed and upgraded to a current and compatible MIT Kerberos 5 distribution (or compatible equivalents). *** (#1 of 3): 2008-02-22 17:41:25 GMT+00:00 <User 1-4T6V8Z> X.Org has removed the old broken Kerberos5 code from Xorg 1.4 and later releases since it didn't build on any platform with MIT Kerberos5 code newer than the early 90's, and recommended that anyone who want this functionality design a replacement around GSSAPI instead: http://cgit.freedesktop.org/xorg/xserver/commit/?id=dfbe32b5b828cc4e3da36a0e2e6ad641164eaa5e *** (#2 of 3): 2008-02-22 20:41:58 GMT+00:00 <User 1-5Q-1267> In addition to what Alan wrote, while use of the GSS API is preferred for stability and flexibility (GSS supports use of other security mechanisms), Solaris now offers a public libkrb5 which should be pretty stable (we are going to stay in sync with MIT on this). I mention this in case it is not reasonable/feasible to use libgss. *** (#3 of 3): 2008-03-07 01:25:22 GMT+00:00 <User 1-5Q-9041> === *Workaround* ============================================================= === *Additional Details* ===================================================== Targeted Release: Commit To Fix In Build: Fixed In Build: Integrated In Build: Verified In Build: See Also: Duplicate of: Hooks: Hook1: Hook2: Hook3: Hook4: Hook5: Hook6: Program Management: Root Cause: Fix Affects Documentation: No Fix Affects Localization: No === *History* ================================================================ Date Submitted: 2008-02-22 17:41:24 GMT+00:00 Submitted By: <User 1-4T6V8Z> Status Changed Date Updated Updated By === *Service Request* ======================================================== Impact: Significant Functionality: Secondary Severity: 3 Product Name: solaris Product Release: solaris_nevada Product Build: Operating System: solaris_nevada Hardware: Submitted Date: 2008-02-22 17:41:25 GMT+00:00 === *Multiple Release (MR) Cluster* - 0 ======================================
