cURL / Mailing Lists / curl-library / Single Mail


Re: [PATCH] SF bug #1302: HTTP Auth Negotiate sends Kerberos token instead of SPNEGO token

From: Michael Osipov <>
Date: Tue, 15 Jul 2014 12:00:43 +0200

Am 2014-07-14 23:27, schrieb Steve Holme:
> On Mon, 14 Jul 2014, Michael Osipov wrote:
> [...]


I'll simply watch your work on curl and will drop in my ideas. If you
plan to introduce improvements, please do hot hesitate laying them out
to the list, I'll respond.

>> Let's take the curl LDAP code for instance, it obviously uses
>> native Windows code or OpenLDAP where both already can use SASL
>> underneath if you performs SASL bind but that code does only a
>> simple bind. Leaving all SASL features behind. Options like
>> --digest, --ntlm, --negotiate do not work basically.
> Unfortunately yes - that is something I would like to sort out once
> I've finished off some of my work in the email protocols - I would
> like to see support for GSSAPI (the mechanism) in there first ;-)

That is highly desired. I think we have several use cases, where we
would like to pull out data from the Active Directory on a daily basis.
GSS-API would give us the ability to automate that stuff completely --
moreover, for some C programs curl would provide a uniform interface.

List admin:
Received on 2014-07-15