On 3/15/11 1:42 PM, Simon Wilkinson wrote:
> On 15 Mar 2011, at 05:02, Luke Howard wrote:
>
>> I managed to get GSS-EAP working with Jabber, using Adium and
>> jabberd2.
>
> Interestingly enough, these are the two applications that I targetted
> when I implemented the GSSAPI mechanism for Jabber, so it's good to
> know that the multi-round trip changes I made then extend to
> mechanisms with even more round trips. The sad state of the Jabber
> world at that point was that most vendors (both client and server)
> purely implemented DIGEST-MD5, with no attempt at a flexible SASL
> loop.
>
> At that point, I also produced support for doing multi-trip
> authentication in Psi, but I have no idea whether it was every
> merged. Many of the Jabber servers do now do GSSAPI, but the only
> ones I've got real knowledge of are implemented in Java, so I suspect
> things won't just plug and play with them.
Simon, when did you investigate these matters? I'd be happy to poke
various folks in the jabber community about their implementations. :)
Peter
--
Peter Saint-Andre
https://stpeter.im/
|