squid_kerb_auth should be able to handle pure GSSAPI as well as SPNEGO
blobs. I did see in in some Windows environments, but is there an RFC for
Kerberos like there is for Negotiate ?
Markus
"Henrik Nordström" <hen...@henriknordstrom.net> wrote in message
news:1324342293.21380.5.ca...@henriknordstrom.net...
lör 2011-12-17 klockan 16:09 +1300 skrev Amos Jeffries:
It seems we should be relaying Kerberos but not advertising (lack of
specific module). Should it be advertised as a separate mechanism to
Negotiate?
Yes it's a separate scheme named Kerberos. But other than that it can
share all of negotiate. The same helper protocol & states. And quite
likely even same helper in several cases even if the blobs differ.
(helper dependent if it accepts both SPNEGO wrapped GSSAPI and bare
GSSAPI)
Regards
Henrik
