[Ovirt-devel] gssapi/kerberos support for qpidd

[Ian Main]

On Thu, 29 Jan 2009 08:45:08 -0800
Ian Main <imain at redhat.com> wrote:

> 
> This set of patches adds support gssapi/kerberos to qpidd.  You'll note that it's still not secure as we allow 'plain' auth with a guest account for daemons that connect over localhost (taskomatic, dbomatic etc.) and unfortunately there's no way to constrain that to localhost connections at this time.
> 
> The qpid team is putting out a new set of rpms in the next day or two which will add gssapi support to ruby at which point we can move those connections to gssapi as well and remove the plain auth with guest access.

I've pushed these patches.  I figured we all know the need to go in anyway so if someone has problems using this let me know and we'll get them resolved asap.

   Ian