2 Commits

Author	SHA1	Message	Date
Andrew Bartlett	0dcd464596	r4494: Allow gensec_gssapi to use the SPNEGO mech provided by Heimdal (off by ... default at this point), and include the GSSAPI OIDs in our source, per advice by lha that this is easier than getting the includes right. Andrew Bartlett (This used to be commit 9ff8b2b4d12d364084df5c95a752ce2a0546053d)	2007-10-10 13:08:12 -05:00
Andrew Bartlett	740ee4a897	r4460: Add a new GENSEC module: gensec_gssapi ... (disabled by default, set parametric option: gensec:gssapi=yes to enable). This module backs directly onto GSSAPI, and allows us to sign and seal GSSAPI/Krb5 connections in particular. This avoids me reinventing the entire GSSAPI wheel. Currently a lot of things are left as default - we will soon start specifiying OIDs as well as passwords (it uses the keytab only at the moment). Tested with our LDAP-* torture tests against Win2k3. My hope is to use this module to access the new SPNEGO implementation in Heimdal, to avoid having to standards-verify our own. Andrew Bartlett (This used to be commit 14b650c85db14a9bf97e24682b2643b63c51ff35)	2007-10-10 13:07:53 -05:00