[31734] in Kerberos
Re: XMPP & Kerberos 5
daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon Nov 30 14:13:36 2009
From: Russ Allbery <rra@stanford.edu>
To: kerberos@mit.edu
In-Reply-To: <hf144h$312m$2@grapevine.csail.mit.edu> (Garrett Wollman's
message of "Mon, 30 Nov 2009 18:49:54 +0000 (UTC)")
Date: Mon, 30 Nov 2009 11:12:58 -0800
Message-ID: <87iqcr6d39.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
wollman@bimajority.org (Garrett Wollman) writes:
> Since no commonly-used XMPP clients support GSSAPI authentication, we
> have not looked seriously at supporting it on the server side. We do
> support it for email.
This isn't our experience, for what it's worth. We require GSSAPI
authentication to talk to our IM servers and don't support password
authentication at all, and this works with enough clients that we have no
trouble (iChat, Adium, Pidgin on Linux or Windows, Finch). We don't
officially support iChat because its implementation of the XMPP protocol
is very buggy, particularly around handling of SRV records, but the GSSAPI
authentication basically works.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
