[Ovirt-devel] oVirt console (again!)

[Daniel P. Berrange]

On Wed, Nov 12, 2008 at 10:09:08AM +0100, Sander Hoentjen wrote:
> On Tue, 2008-11-11 at 16:09 +0000, Richard W.M. Jones wrote:
> > On Tue, Nov 11, 2008 at 04:48:04PM +0100, Gerd Hoffmann wrote:
> > > Gerd Hoffmann wrote:
> > > > Richard W.M. Jones wrote:
> > > >> The problem, as ever, is with Windows.  It's hard to set up a Windows
> > > >> client as a Kerberos client, so this won't just work.
> > > 
> > > > Might be worth talking to the freeipa/samba folks maybe whenever it is
> > > > possible to make windows play nice here?
> > > 
> > > Some doc reading and experiments later ...
> > > 
> > > With MIT Kerberos for Windows installed the Windows machine can
> > > authenticate against freeipa.  Setup is pretty straight forward and
> > > described at the freeipa website.
> > > 
> > > Requires that the applications support gssapi though.  Firefox can
> > > handle both ways (sspi == native windows with ADC, gssapi == MIT).
> > > 
> > > To get the WUI on a windows box this must be setup anyway.  Then have
> > > libvirt auth via MIT-gssapi too should work nicely and probably without
> > > too much coding effort as gssapi at linux code is there already ...
> > 
> > I've been banging my head against NSS/NSPR all morning, so crypto
> > libraries & Mozilla are both generally driving me around the bend :-(
> > 
> > However last weekend I did find that someone has ported a part of
> > Cyrus SASL to Windows.  Good news that at least it's possible!
> > Unfortunately bad news that there's no source for their port (so we'll
> > have to recreate the techniques) and I suspect that it's only a
> > partial port and key bits may be missing.  Not looked into it in great
> > detail yet, but the binary is here:
> > 
> >   http://developer.pidgin.im/wiki/BuildingWinPidgin
> > 
> > Rich.
> > 
> I think they get it from
> <http://cyrusimap.web.cmu.edu/downloads.html#sasl>
> Did you ask Pidgin for the source code? It seems strange to me that they
> would keep this part closed.

Yes, it'd be worth a try - they probably just don't realize anyone cares
about the windows build source. I imagine they kept it somewhere though
because they'd have to do period updates to the SASL build for Win32

Daniel
-- 
|: Red Hat, Engineering, London   -o-   http://people.redhat.com/berrange/ :|
|: http://libvirt.org  -o-  http://virt-manager.org  -o-  http://ovirt.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: GnuPG: 7D3B9505  -o-  F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|