Thunderbird:Supported authentication methods: Difference between revisions

m
Add category info
m (Add category info)
 
(8 intermediate revisions by 3 users not shown)
Line 5: Line 5:
*[https://bugzilla.mozilla.org/show_bug.cgi?id=307788 IMAP/GSSAPI implemented?]
*[https://bugzilla.mozilla.org/show_bug.cgi?id=307788 IMAP/GSSAPI implemented?]
*[https://bugzilla.mozilla.org/show_bug.cgi?id=17578 Request for HTTP/GSSAPI auth] (implemented in 1.7)
*[https://bugzilla.mozilla.org/show_bug.cgi?id=17578 Request for HTTP/GSSAPI auth] (implemented in 1.7)
*[https://bugzilla.mozilla.org/show_bug.cgi?id=292801 Request for LDAP/GSSAPI auth]
*[https://bugzilla.mozilla.org/show_bug.cgi?id=308118 Request for LDAP/GSSAPI auth]
*[https://bugzilla.mozilla.org/show_bug.cgi?id=133939 Request for SOCKS5/GSSAPI]
*[https://bugzilla.mozilla.org/show_bug.cgi?id=133939 Request for SOCKS5/GSSAPI]


Line 15: Line 15:


== POP3 ==
== POP3 ==
I don't use this old protocol.
*RFC 1939 - POP3 protocol description
*RFC 1734 - POP3 Authentication description


== SASL ==
== SASL ==


Thunderbird 1.5 beta has support for SASL/GSSAPI support.  The client must first have a valid Kerberos ticket and the server must also support SASL/GSSAPI authentication in order to succeed.  [http://www.washington.edu/imap UW IMAP Server] has support for SASL/GSSAPI.
* RFC 2222 - SASL Specification, section 7.2 describes SASL-GSSAPI
* RFC 4752 - updated SASL GSSAPI spec - describes use of SASL with GSSAPI/KRB5 and GSSAPI/SPNEGO mechanisms.


== NTLM and SPNEGO? ==
 
Thunderbird 1.5 beta has support for SASL/GSSAPI support.  The client must first have a valid Kerberos ticket and the server must also support SASL/GSSAPI authentication in order to succeed.  [http://www.washington.edu/imap UW IMAP Server] has support for SASL/GSSAPI, as does the [http://www.dovecot.org/ Dovecot] system.
 
== NTLM and SPNEGO ==


GSSAPI authentication, either with SPNEGO tokens or with GSSAPI
GSSAPI authentication, either with SPNEGO tokens or with GSSAPI
Line 33: Line 38:
See some details here:
See some details here:


- [https://bugzilla.mozilla.org/attachment.cgi?id=134505 IETF Internet draft (expired) describing HTTP Auth Negotiation] - the IETF KITTEN WG is currently finalizing a new official specification for the SPNEGO exchange, soon to become
*[https://bugzilla.mozilla.org/attachment.cgi?id=134505 IETF Internet draft (expired) describing HTTP Auth Negotiation]
RFC 4178.


- [https://bugzilla.mozilla.org/show_bug.cgi?id=17578 GSSAPI negotiation support added to Mozilla]
*RFC 2478 - Original SPNEGO specification (broken and outdated as of Fall 2005)


- [https://bugzilla.mozilla.org/show_bug.cgi?id=303160 SASL/GSSAPI support added to Thunderbird ]
*RFC 4178 - (coming soon) official SPNEGO specification.


- [http://blogs.sun.com/roller/page/wyllys?entry=kerberos_web_authentiation_with_apache  Configure GSSAPI auth for Mozilla and Apache (on Solaris)] - also describes IIS and IE configuration.
*[https://bugzilla.mozilla.org/show_bug.cgi?id=17578 GSSAPI negotiation support added to Mozilla]
 
*[https://bugzilla.mozilla.org/show_bug.cgi?id=303160 SASL/GSSAPI support added to Thunderbird ]
 
*[http://blogs.sun.com/roller/page/wyllys?entry=kerberos_web_authentiation_with_apache  Configure GSSAPI auth for Mozilla and Apache (on Solaris)] - also describes IIS and IE configuration.


== General ==
== General ==
*[https://bugzilla.mozilla.org/show_bug.cgi?id=240643 Try the last successful authentication method first.]
*[https://bugzilla.mozilla.org/show_bug.cgi?id=240643 Try the last successful authentication method first.]
*https://bugzilla.mozilla.org/show_bug.cgi?id=237586
*[https://bugzilla.mozilla.org/show_bug.cgi?id=237586 NegotiateAuth support in SSPI for Windows]


== GSSAPI implementations ==
== GSSAPI implementations ==
*RFC 2743 - GSSAPI V2
*RFC 2744 - GSSAPI V2 C-Bindings
*MIT
*MIT
*Sun
*Sun
*Heimdal
*Heimdal
*[https://bugzilla.mozilla.org/show_bug.cgi?id=286030 GNU]
*[https://bugzilla.mozilla.org/show_bug.cgi?id=286030 GNU]
[[category:Thunderbird|*]]
canmove, Confirmed users, Bureaucrats and Sysops emeriti
3,628

edits