Re: [Dovecot] [PATCH] Support GSS-SPNEGO natively

2008-08-13 Thread Timo Sirainen
Committed the patch to v1.2 tree with some changes: http://hg.dovecot.org/dovecot-1.2/rev/641d761219a6 PGP.sig Description: This is a digitally signed message part

Re: [Dovecot] [PATCH] Support GSS-SPNEGO natively

2008-08-13 Thread Jason Gunthorpe
On Wed, Aug 13, 2008 at 04:23:46PM -0400, Timo Sirainen wrote: Committed the patch to v1.2 tree with some changes: http://hg.dovecot.org/dovecot-1.2/rev/641d761219a6 What happens when the winbind_spnego and the gssapi_spnego are registered at once? I did not address this because I did not have

Re: [Dovecot] [PATCH] Support GSS-SPNEGO natively

2008-08-13 Thread Timo Sirainen
On Aug 13, 2008, at 4:35 PM, Jason Gunthorpe wrote: Ideally though it would be nice if the config file could specify a mapping from SASL name to internal module and NTLM_USE_WINBIND could go away. Well, I renamed auth_ntlm_use_winbind to just auth_use_winbind:

[Dovecot] [PATCH] Support GSS-SPNEGO natively

2008-08-12 Thread Jason Gunthorpe
I cooked this up while trying to figure out why thunderbird on Windows w/ SSPI was not working, but it turned out thunderbird does not use it, so I haven't been able to test it yet. I'm presenting it for discussion only, unless someone else can try it :) Modern versions of MIT kerberos support

Re: [Dovecot] [PATCH] Support GSS-SPNEGO natively

2008-08-12 Thread Angel Marin
Jason Gunthorpe wrote: I cooked this up while trying to figure out why thunderbird on Windows w/ SSPI was not working, but it turned out thunderbird does not use it, so I haven't been able to test it yet. I'm presenting it for discussion only, unless someone else can try it :) thunderbird does

Re: [Dovecot] [PATCH] Support GSS-SPNEGO natively

2008-08-12 Thread Jason Gunthorpe
On Tue, Aug 12, 2008 at 10:27:40AM +0200, Angel Marin wrote: Jason Gunthorpe wrote: I cooked this up while trying to figure out why thunderbird on Windows w/ SSPI was not working, but it turned out thunderbird does not use it, so I haven't been able to test it yet. I'm presenting it for

Re: [Dovecot] [PATCH] Support GSS-SPNEGO natively

2008-08-12 Thread Timo Sirainen
On Aug 12, 2008, at 2:44 AM, Jason Gunthorpe wrote: This is how the SPNEGO works in libapache-mod-auth-kerb-5.3 which simply passes SPNEGO packets directly to gssapi if the library is new enough. There is even a configure feature test for the gssapi library in that packages configure script.

Re: [Dovecot] [PATCH] Support GSS-SPNEGO natively

2008-08-12 Thread Jason Gunthorpe
On Tue, Aug 12, 2008 at 01:11:47PM -0400, Timo Sirainen wrote: On Aug 12, 2008, at 2:44 AM, Jason Gunthorpe wrote: This is how the SPNEGO works in libapache-mod-auth-kerb-5.3 which simply passes SPNEGO packets directly to gssapi if the library is new enough. There is even a configure feature

Re: [Dovecot] [PATCH] Support GSS-SPNEGO natively

2008-08-12 Thread Angel Marin
Jason Gunthorpe wrote: On Tue, Aug 12, 2008 at 10:27:40AM +0200, Angel Marin wrote: Jason Gunthorpe wrote: I cooked this up while trying to figure out why thunderbird on Windows w/ SSPI was not working, but it turned out thunderbird does not use it, so I haven't been able to test it yet. I'm

Re: [Dovecot] [PATCH] Support GSS-SPNEGO natively

2008-08-12 Thread Jason Gunthorpe
On Tue, Aug 12, 2008 at 10:23:19PM +0200, Angel Marin wrote: Jason Gunthorpe wrote: On Tue, Aug 12, 2008 at 10:27:40AM +0200, Angel Marin wrote: Jason Gunthorpe wrote: I cooked this up while trying to figure out why thunderbird on Windows w/ SSPI was not working, but it turned out