diff options
| author | Steve Holme <steve_holme@hotmail.com> | 2016-08-31 11:22:12 +0100 |
|---|---|---|
| committer | Steve Holme <steve_holme@hotmail.com> | 2016-08-31 11:22:12 +0100 |
| commit | 088ffcba3e091fdd4d3a12b6c1e626ce92130820 (patch) | |
| tree | 269006124e7b9671beeeac80899384917b5b935d | |
| parent | c69cafe7e260144142f8cc89f74c5b3dc8294451 (diff) | |
KNOWN_BUGS: Expand 6.4 to include Kerberos V5
...and discuss a possible solution.
| -rw-r--r-- | docs/KNOWN_BUGS | 20 |
1 files changed, 12 insertions, 8 deletions
diff --git a/docs/KNOWN_BUGS b/docs/KNOWN_BUGS index 4a8939856..631ec2abb 100644 --- a/docs/KNOWN_BUGS +++ b/docs/KNOWN_BUGS @@ -54,7 +54,7 @@ problems may have been fixed or changed somewhat since this was written! 6.1 NTLM authentication and unicode 6.2 MIT Kerberos for Windows build 6.3 NTLM in system context uses wrong name - 6.4 Negotiate needs a fake user name + 6.4 Negotiate and Kerberos V5 need a fake user name 7. FTP 7.1 FTP without or slow 220 response @@ -379,13 +379,17 @@ problems may have been fixed or changed somewhat since this was written! "system context" will make it use wrong(?) user name - at least when compared to what winhttp does. See https://curl.haxx.se/bug/view.cgi?id=535 -6.4 Negotiate needs a fake user name - - To get HTTP Negotiate (SPNEGO) authentication to work fine, you need to - provide a (fake) user name (this concerns both curl and the lib) because the - code wrongly only considers authentication if there's a user name provided. - https://curl.haxx.se/bug/view.cgi?id=440 How? - https://curl.haxx.se/mail/lib-2004-08/0182.html +6.4 Negotiate and Kerberos V5 need a fake user name + + In order to get Negotiate (SPNEGO) authentication to work in HTTP or Kerberos + V5 in the e-mail protocols, you need to provide a (fake) user name (this + concerns both curl and the lib) because the code wrongly only considers + authentication if there's a user name provided by setting + conn->bits.user_passwd in url.c https://curl.haxx.se/bug/view.cgi?id=440 How? + https://curl.haxx.se/mail/lib-2004-08/0182.html A possible solution is to + either modify this variable to be set or introduce a variable such as + new conn->bits.want_authentication which is set when any of the authentication + options are set. 7. FTP |