Cyrus 2.2.3 authentication GSS-API - why?

[Rob Siemborski]

On Thu, 4 Mar 2004, Nikola Milutinovic wrote:

> I have noticed that Cyrus IMAP 2.2.3 has a rather extensive support for GSS-API
> (part of Kerberos5). I'm pleased to see that all 4 major players in the
> Kerberos5 arena are recognized (MIT, Heimdal, CS and SEAM).
>
> However, I'm confused as to why this exists?
>
> Isn't SASL supposed to handle GSS-API as one of it's mechanisms?

Yes -- and to do that it needs the GSSAPI libraries.

> Why do I need to build GSS-API directly into Cyrus IMAP?

Well, Cyrus will wind up linking to it.  Also, if you want to do
Kerberos 5 canonicalization, Cyrus itself will need to make some Kerberos
5 calls.

> Is there a separate Non-SASL, GSS-API authentication method for IMAP?

No.

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper

---
Home Page: http://asg.web.cmu.edu/cyrus
Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html