Re: map of authentication methods for cyrus

2003-11-07 Thread Rob Siemborski
On Fri, 7 Nov 2003, Craig Ringer wrote: > > GSSAPI/KERBEROS_V4 rely on the Kerberos Domain Controllers (KDC). > > Yeah. I left that off because it seemed pretty obvious, but p'haps it's > best included. It struck me as the same as a "Windows NT" authentication source. > I personally like using P

Re: map of authentication methods for cyrus

2003-11-07 Thread Simon Matter
>> This is much better. I'd probably put the mechanisms outside of the >> libsasl box, since they are (almost always) loaded dynamicly. > > OK. > >> NTLM can use either Windows NT networking or the auxprop plugins. > > I don't quite get you there. I'll have a deeper look into the NTLM > support an

Re: map of authentication methods for cyrus

2003-11-06 Thread Ken Murchison
Craig Ringer wrote: This is much better. I'd probably put the mechanisms outside of the libsasl box, since they are (almost always) loaded dynamicly. OK. NTLM can use either Windows NT networking or the auxprop plugins. I don't quite get you there. I'll have a deeper look into the NTLM supp

Re: map of authentication methods for cyrus

2003-11-06 Thread Craig Ringer
This is much better. I'd probably put the mechanisms outside of the libsasl box, since they are (almost always) loaded dynamicly. OK. NTLM can use either Windows NT networking or the auxprop plugins. I don't quite get you there. I'll have a deeper look into the NTLM support and see if I get a be

Re: map of authentication methods for cyrus

2003-11-06 Thread Rob Siemborski
On Thu, 6 Nov 2003, Craig Ringer wrote: > I'm about as far from an expert on Cyrus as there is, so apologies if > I'm dead wrong about something. I do think that a document like this > will be useful in showing people how things fit together, and the > various different "paths" through which Cyrus

Re: map of authentication methods for cyrus

2003-11-06 Thread Simon Matter
Hi Craig, I just wanted to say that such a 'big picture' is VERY useful. One picture says more than thousand words. Thanks, Simon > I posted a little while ago with a graphical map of the Cyrus > authentication methods - missing the Mechanism layer completely. > I think I have a better understan

Re: map of authentication methods for cyrus

2003-11-05 Thread Craig Ringer
I posted a little while ago with a graphical map of the Cyrus authentication methods - missing the Mechanism layer completely. I think I have a better understanding of that now, and have updated the document appropriately. Comments would be appreciated. I'm about as far from an expert on Cyrus as t

Re: map of authentication methods for cyrus

2003-10-30 Thread Craig Ringer
Ken Murchison wrote: Craig, this is a good start, but as Rob said, you've left out the mechanism layer. Hmm... thanks. It appears that there's something lacking in my understanding of the authentication scheme, but the posts on this thread have given me some idea where to look and learn. I'll inc

Re: map of authentication methods for cyrus

2003-10-30 Thread Rob Siemborski
On Fri, 31 Oct 2003, Craig Ringer wrote: > Rob Siemborski wrote: > > I'd also be much more inclined to accept this into the distribution if it > > was in an easily modifiable format (at this point, I suspect that means > > xfig, but if you have another suggestion I'm willing to listen). > > The cu

Re: map of authentication methods for cyrus

2003-10-30 Thread Rob Siemborski
On Thu, 30 Oct 2003, Ken Murchison wrote: > Craig Ringer wrote: > > > I'd really appreciate feedback on this - what have I missed, do I have > > anything just plain wrong, etc. I've left out some things - like the > > 'shadow' mechanism of saslauthd - that seem best solved using other > > methods

Re: map of authentication methods for cyrus

2003-10-30 Thread Ken Murchison
Craig Ringer wrote: I'd really appreciate feedback on this - what have I missed, do I have anything just plain wrong, etc. I've left out some things - like the 'shadow' mechanism of saslauthd - that seem best solved using other methods (getpwent in that case). Also left out are the specific-ven

Re: map of authentication methods for cyrus

2003-10-30 Thread Rob Siemborski
On Thu, 30 Oct 2003, Craig Ringer wrote: > I'd really appreciate feedback on this - what have I missed, do I have > anything just plain wrong, etc. I've left out some things - like the > 'shadow' mechanism of saslauthd - that seem best solved using other > methods (getpwent in that case). Also lef