Security Factor with GSSAPI (MIT Compat/Cyrus-SASL 2.1.27 compatibility)
Quanah Gibson-Mount <[email protected]> Mon, 20 Aug 2018 13:12:10 -0700
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <1634ACA9CD5F1E5CEDB98648@[192.168.1.10]> |
Historically, the SSF value in Cyrus-SASL for GSSAPI connections has been hard coded to "56" (DES). The MIT project added capability to provide back a derived SSF for Cyrus-SASL to use. However, Heimdal does not appear to have a corresponding value that can be passed into Cyrus-SASL. This has been a significant issue for years, and it would be nice to be able to obtain the same information regardless of Kerberos implementation. In the MIT code, this is provided via: GSS_C_SEC_CONTEXT_SASL_SSF Is there something similar in Heimdal that I'm missing, or should I open an issue on GitHub for this functionality to be added? Thanks! Warm regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>