New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Kerberos Authentication Support [CORE647] #1012

Open

firebird-automations opened this issue Aug 19, 2004 · 9 comments

Labels

component: security priority: minor type: new feature

Collaborator

firebird-automations commented Aug 19, 2004

Submitted by: fomyers (fomyers)

Is related to CORE721

SFID: 1012454#⁠
Submitted By: fomyers

My opinion:"Authentication by useridname and password
is bad. Authentication via Kerberos tickets is better."

Good kerberos Implementations can interface to
windows or *nix systems.

Java can do most of this via JAAS. Other environments
can use Kerberos/Heimdal GSSAPI (on Linux) or SSPI (on
Win2k or higher). The interfaces are very similar and
should be easily wrapped by C++ classes for hiding the
interface.

The client side code should (if null useridname/password
is passed) try kerberos.

See
http://www.cs.odu.edu/~cs472/fall03/lectures/kerberos.
html for discussion of Kerberos Authentication basics

Collaborator Author

firebird-automations commented Jun 14, 2006

Commented by: Alice F. Bird (firebirds)

Date: 2004-08-23 17:57
Sender: fomyers
Logged In: YES
user_id=572173

Then we could use PAM_Krb5 :
http://sourceforge.net/projects/pam-krb5/

Collaborator Author

firebird-automations commented Jun 14, 2006

Commented by: Alice F. Bird (firebirds)

Date: 2004-08-23 16:24
Sender: fomyers
Logged In: YES
user_id=572173

Perhaps a PAM interface would be best?

1 similar comment

Collaborator Author

firebird-automations commented Jun 14, 2006

Commented by: Alice F. Bird (firebirds)

Date: 2004-08-23 16:24
Sender: fomyers
Logged In: YES
user_id=572173

Perhaps a PAM interface would be best?

Collaborator Author

firebird-automations commented Jun 14, 2006

Commented by: Alice F. Bird (firebirds)

Date: 2004-08-23 16:02
Sender: fomyers
Logged In: YES
user_id=572173

A good GSSAPI can be found at :
"http://www.cs.man.ac.uk/solaris/sun_docs/C/solaris_9/SUNW
dev/GSSAPIPG/p1.html"

The starting thread of SSPI an MSDN is at :
"http://msdn.microsoft.com/library/en-
us/rpc/rpc/security_support_provider_interface_sspi_.asp?
frame=true"

Another source of info for these interfaces is :
http://www.develop.com/books/pws/samples.htm

Collaborator Author

firebird-automations commented Jun 14, 2006

Commented by: Alice F. Bird (firebirds)

Date: 2004-08-23 16:01
Sender: fomyers
Logged In: YES
user_id=572173

A good GSSAPI can be found at :
"http://www.cs.man.ac.uk/solaris/sun_docs/C/solaris_9/SUNW
dev/GSSAPIPG/p1.html"

The starting thread of SSPI an MSDN is at :
"http://msdn.microsoft.com/library/en-
us/rpc/rpc/security_support_provider_interface_sspi_.asp?
frame=true"

Another source of info for these interfaces is :
http://www.develop.com/books/pws/samples.htm

Collaborator Author

firebird-automations commented Jun 17, 2006

Modified by: @pcisar

Link: This issue is related to CORE721 [ CORE721 ]

Collaborator Author

firebird-automations commented Jul 1, 2006

Modified by: @dyemanov

priority: Major [ 3 ] => Minor [ 4 ]

Component: Security [ 10071 ]

assignee: Dmitry Yemanov [ dimitr ]

SF_ID: 1012454 =>

Collaborator Author

firebird-automations commented Jul 6, 2006

Modified by: @pcisar

assignee: Dmitry Yemanov [ dimitr ] =>

Collaborator Author

firebird-automations commented Jan 28, 2008

Modified by: @pcisar

Workflow: jira [ 10671 ] => Firebird [ 15014 ]

firebird-automations added priority: minor component: security type: new feature labels

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment