squid_kerb_auth should be able to handle pure GSSAPI as well as SPNEGO
blobs. I did see in in some Windows environments, but is there an RFC for
Kerberos like there is for Negotiate ?
Markus
"Henrik Nordström" <[email protected]> wrote in message
news:[email protected]...
lör 2011-12-17 klockan 16:09 +1300 skrev Amos Jeffries:
It seems we should be relaying Kerberos but not advertising (lack of
specific module). Should it be advertised as a separate mechanism to
Negotiate?
Yes it's a separate scheme named Kerberos. But other than that it can
share all of negotiate. The same helper protocol & states. And quite
likely even same helper in several cases even if the blobs differ.
(helper dependent if it accepts both SPNEGO wrapped GSSAPI and bare
GSSAPI)
Regards
Henrik
