Hi Daniel,

I can work on a configure change to detect if fbopenssl is required and add
a flag --spnego if you need spnego tokens instead of gssapi tokens. This
will take me a bit as I am quite busy right now.

So Arunav fix for the cases when fbopenssl is still required (e.g. GNU gss
and very old MIT/Heimdal libraries) should then be anyway included to
cover the unusual cases a server returns gssapi tokens when spnego is send
.

Markus

"Daniel Stenberg" wrote in message
news:alpine.DEB.2.00.1310130009420.22193_at_tvnag.unkk.fr...

On Tue, 1 Oct 2013, Markus Moeller wrote:

> Sorry if I may add more confusion, but the right way to do it with the
> newer Kerberos libraries is to use a flag with curl (e.g. --spnego) and
> set the mech type to the right value in curl_gssapi.c

Is there any chance I can get a single patch that incorporates both yours
and
Arunav's concerns? The grand Markus+Arunav improvement fix for libcurl's
spnego and gss situation?

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html 
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html