Am 2014-07-10 18:04, schrieb David Woodhouse:
On Mon, 2014-05-26 at 22:50 +0200, Michael Osipov wrote:
Hi folks,
I am the originator of this ticket but was not able to provide a
suitable patch up until now.
The changes and reasons in/for this patch:
Due to missing #ifdefs, curl tries to perform SPNEGO auth even if it has
been compiled w/o fbopenssl SPNEGO library. Now, Negotiate works, if and
only if, SPNEGO support has bin compiled in, requiring GSS-API is
present and enabled --with-gssapi.
Git diff: https://github.com/michael-o/curl/compare/HEAD...a893c7e
Patch has been tested on Ubuntu and HP-UX.
Wow, Curl has a very.... interesting way of implementing SPNEGO. Most
people would just ask the GSSAPI library to do SPNEGO.
That is absolutely true. This is an area which I want to improve in curl
mid-term. The reason for fbopenssl was probably some one did not hav a
capable GSS-API version. I waiting for this patch to be merged and then
I could adapt configure.ac and patch the source code in a way were FTP
and SOCKS use KRB5_MECHANISM and HTTP uses SPNEGO_MECHANISM.
There is room for improvement.
Michael
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
