From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/86790 Path: news.gmane.org!not-for-mail From: Jochen Hein Newsgroups: gmane.emacs.gnus.general Subject: Re: gssapi authentication for nnimap Date: Mon, 08 Feb 2016 10:51:26 +0100 Message-ID: <83h9hjsf6p.fsf@echidna.jochen.org> References: <87oaecan6t.fsf@mid.deneb.enyo.de> <87d1sanxyx.fsf@gnus.org> <83a8ncfnkc.fsf@echidna.jochen.org> <8737t3g4hk.fsf@gnus.org> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1454925414 27563 80.91.229.3 (8 Feb 2016 09:56:54 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 8 Feb 2016 09:56:54 +0000 (UTC) Cc: Florian Weimer , ding@gnus.org To: Lars Ingebrigtsen Original-X-From: ding-owner+M35015@lists.math.uh.edu Mon Feb 08 10:56:39 2016 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from lists1.math.uh.edu ([129.7.128.208]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1aSiYf-0007c7-F2 for ding-account@gmane.org; Mon, 08 Feb 2016 10:56:37 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by lists1.math.uh.edu with smtp (Exim 4.85) (envelope-from ) id 1aSiXn-0000Ox-6C; Mon, 08 Feb 2016 03:55:43 -0600 Original-Received: from mx2.math.uh.edu ([129.7.128.33]) by lists1.math.uh.edu with esmtps (TLSv1.2:AES128-GCM-SHA256:128) (Exim 4.85) (envelope-from ) id 1aSiXj-0000OP-N3 for ding@lists.math.uh.edu; Mon, 08 Feb 2016 03:55:39 -0600 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx2.math.uh.edu with esmtps (TLSv1.2:DHE-RSA-AES128-SHA:128) (Exim 4.85) (envelope-from ) id 1aSiXf-0003Mz-9E for ding@lists.math.uh.edu; Mon, 08 Feb 2016 03:55:39 -0600 Original-Received: from smtp.dinoex.de ([188.40.204.4] ident=root) by quimby.gnus.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA256:256) (Exim 4.80) (envelope-from ) id 1aSiXd-00009C-BJ; Mon, 08 Feb 2016 10:55:33 +0100 Original-Received: from smtp.dinoex.de (uucp@smtp.dinoex.de [188.40.204.4]) by smtp.dinoex.de (8.15.2/8.15.1) with ESMTPS id u189t4Qw062870 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Mon, 8 Feb 2016 10:55:05 +0100 (CET) (envelope-from jochen@jochen.org) Original-Received: (from uucp@localhost) by smtp.dinoex.de (8.15.2/8.15.1/Submit) with UUCP id u189t4vU062868; Mon, 8 Feb 2016 10:55:04 +0100 (CET) (envelope-from jochen@jochen.org) Original-Received: from echidna.jochen.org (echidna.jochen.org [IPv6:fd23:e163:19f7:1234:222:4dff:fe7c:d76a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by jupiter.jochen.org (Postfix) with ESMTPSA id B282626C; Mon, 8 Feb 2016 10:51:26 +0100 (CET) X-Message-Flag: This space is intentionally left blank In-Reply-To: <8737t3g4hk.fsf@gnus.org> (Lars Ingebrigtsen's message of "Mon, 08 Feb 2016 16:23:19 +1100") User-Agent: Gnus/5.130015 (Ma Gnus v0.15) Emacs/24.4 (gnu/linux) X-Milter: Spamilter (Reciever: smtp.dinoex.de; Sender-ip: 188.40.204.4; Sender-helo: smtp.dinoex.de;) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.4.3 (smtp.dinoex.de [188.40.204.4]); Mon, 08 Feb 2016 10:55:06 +0100 (CET) X-Spam-Score: -1.9 (-) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:86790 Archived-At: Lars Ingebrigtsen writes: >> We should remove references in the gnus manual to gssapi or reference >> nnimap-shell-program. I'm not sure that the following gssapi options >> would be still useful: >> >> `:stream' >> What stream to use for connecting to the server, this is one >> of the symbols in `imap-stream-alist'. Right now, this means >> `gssapi', `kerberos4', `starttls', `tls', `ssl', `shell' or >> the default `network'. >> >> `:authentication' >> Which authenticator to use for authenticating to the server, >> this is one of the symbols in `imap-authenticator-alist'. >> Right now, this means `gssapi', `kerberos4', `digest-md5', >> `cram-md5', `anonymous' or the default `login'. > > We do still have the gssapi.el file, so we could presumably get this > stuff working again, if somebody with access to a server that uses > gssapi could hack away at it a bit... I had a look at gssapi.el - I think that file only handles the :stream part of gssapi. Right? Doesn't look to hard to hack on that file, except that Debians gsasl in Jessie doesn't handle gssapi due to bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776847 I'll have a look at backporting the newer gsasl package. Jochen -- The only problem with troubleshooting is that the trouble shoots back.