canmove, Confirmed users, Bureaucrats and Sysops emeriti
3,628
edits
(→SASL?) |
m (Add category info) |
||
| (8 intermediate revisions by 3 users not shown) | |||
| Line 5: | Line 5: | ||
*[https://bugzilla.mozilla.org/show_bug.cgi?id=307788 IMAP/GSSAPI implemented?] | *[https://bugzilla.mozilla.org/show_bug.cgi?id=307788 IMAP/GSSAPI implemented?] | ||
*[https://bugzilla.mozilla.org/show_bug.cgi?id=17578 Request for HTTP/GSSAPI auth] (implemented in 1.7) | *[https://bugzilla.mozilla.org/show_bug.cgi?id=17578 Request for HTTP/GSSAPI auth] (implemented in 1.7) | ||
*[https://bugzilla.mozilla.org/show_bug.cgi?id= | *[https://bugzilla.mozilla.org/show_bug.cgi?id=308118 Request for LDAP/GSSAPI auth] | ||
*[https://bugzilla.mozilla.org/show_bug.cgi?id=133939 Request for SOCKS5/GSSAPI] | *[https://bugzilla.mozilla.org/show_bug.cgi?id=133939 Request for SOCKS5/GSSAPI] | ||
| Line 15: | Line 15: | ||
== POP3 == | == POP3 == | ||
*RFC 1939 - POP3 protocol description | |||
*RFC 1734 - POP3 Authentication description | |||
== SASL == | == SASL == | ||
* RFC 2222 - SASL Specification, section 7.2 describes SASL-GSSAPI | |||
* RFC 4752 - updated SASL GSSAPI spec - describes use of SASL with GSSAPI/KRB5 and GSSAPI/SPNEGO mechanisms. | |||
== NTLM and SPNEGO | |||
Thunderbird 1.5 beta has support for SASL/GSSAPI support. The client must first have a valid Kerberos ticket and the server must also support SASL/GSSAPI authentication in order to succeed. [http://www.washington.edu/imap UW IMAP Server] has support for SASL/GSSAPI, as does the [http://www.dovecot.org/ Dovecot] system. | |||
== NTLM and SPNEGO == | |||
GSSAPI authentication, either with SPNEGO tokens or with GSSAPI | GSSAPI authentication, either with SPNEGO tokens or with GSSAPI | ||
| Line 33: | Line 38: | ||
See some details here: | See some details here: | ||
*[https://bugzilla.mozilla.org/attachment.cgi?id=134505 IETF Internet draft (expired) describing HTTP Auth Negotiation] | |||
- | *RFC 2478 - Original SPNEGO specification (broken and outdated as of Fall 2005) | ||
- | *RFC 4178 - (coming soon) official SPNEGO specification. | ||
*[https://bugzilla.mozilla.org/show_bug.cgi?id=17578 GSSAPI negotiation support added to Mozilla] | |||
*[https://bugzilla.mozilla.org/show_bug.cgi?id=303160 SASL/GSSAPI support added to Thunderbird ] | |||
*[http://blogs.sun.com/roller/page/wyllys?entry=kerberos_web_authentiation_with_apache Configure GSSAPI auth for Mozilla and Apache (on Solaris)] - also describes IIS and IE configuration. | |||
== General == | == General == | ||
*[https://bugzilla.mozilla.org/show_bug.cgi?id=240643 Try the last successful authentication method first.] | *[https://bugzilla.mozilla.org/show_bug.cgi?id=240643 Try the last successful authentication method first.] | ||
*https://bugzilla.mozilla.org/show_bug.cgi?id=237586 | *[https://bugzilla.mozilla.org/show_bug.cgi?id=237586 NegotiateAuth support in SSPI for Windows] | ||
== GSSAPI implementations == | == GSSAPI implementations == | ||
*RFC 2743 - GSSAPI V2 | |||
*RFC 2744 - GSSAPI V2 C-Bindings | |||
*MIT | *MIT | ||
*Sun | *Sun | ||
*Heimdal | *Heimdal | ||
*[https://bugzilla.mozilla.org/show_bug.cgi?id=286030 GNU] | *[https://bugzilla.mozilla.org/show_bug.cgi?id=286030 GNU] | ||
[[category:Thunderbird|*]] | |||