[MERGE] GSSAPI Authentication support for HTTP

Jelmer Vernooij jelmer at samba.org
Tue Feb 17 02:01:53 GMT 2009


The attached patch adds support for WWW-Authenticate: Negotiate using
Kerberos (GSSAPI). 

I've tested it here locally against a couple of servers, but it's hard
to do automated tests, as setting up a KDC + mod_auth_kerberos is
nontrivial. 

Since this code is only executed for "WWW-Authenticate: Negotiate", it
can potentially only break in situations that didn't work previously
anyway.

At the moment, it's necessary to specify a username in the URL as bzr
requires it for authentication, even though this is not required by
Kerberos/GSSAPI. The specified username is ignored.

Cheers,

Jelmer
-- 
Jelmer Vernooij <jelmer at samba.org> - http://samba.org/~jelmer/
Jabber: jelmer at jabber.fsfe.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: http-gssapi-4013.patch
Type: text/x-patch
Size: 7728 bytes
Desc: not available
Url : https://lists.ubuntu.com/archives/bazaar/attachments/20090217/f0a09319/attachment.bin 


More information about the bazaar mailing list