Re: sasl mechanisms order

2010-07-27 Thread Daniel Shahaf
Alec Kloss wrote on Tue, Jul 27, 2010 at 12:42:11 -0500: > I'd dread the day someone changed the Cyrus SASL Makefile and got them > installed in reverse order. Personally, I'd just assume the order is "arbitrary" and not rely on it to have any particular rule behind it.

Re: sasl mechanisms order

2010-07-27 Thread Alec Kloss
On 2010-07-27 09:14, Victor Sudakov wrote: [chop] > Thank you for having found this out. This is truly amazing. This means > that if perchance I touch a file in /usr/local/lib/sasl2/, my Kerberos > SSO can stop working? [chop] Well, that's pretty unlikely. It's moderately difficult to re-arrange

Re: sasl mechanisms order

2010-07-27 Thread Victor Sudakov
Daniel Shahaf wrote: > > So we seem to have a stalemate situation. The SASL library believes > > the client should select the preferred mechanism, whereas the Subversion > > client relies on "the order suggested by the server". Brilliant. > > It would be more constructive to summarize the problem

Re: sasl mechanisms order

2010-07-26 Thread Daniel Shahaf
Victor Sudakov wrote on Tue, Jul 27, 2010 at 09:14:42 +0700: > So we seem to have a stalemate situation. The SASL library believes > the client should select the preferred mechanism, whereas the Subversion > client relies on "the order suggested by the server". Brilliant. It would be more construc

Re: sasl mechanisms order

2010-07-26 Thread Victor Sudakov
Alec Kloss wrote: [dd] > > As far as I can tell (and as amazing as this sounds), the order of the > offered mechanisms from Cyrus sasl is, by default, the reverse of the > order that the library finds them. This would be, in effect, the > reverse physical directory order of the modules in > /us

Re: sasl mechanisms order

2010-07-26 Thread Alec Kloss
On 2010-07-26 14:30, Victor Sudakov wrote: > Daniel Shahaf wrote: > > > > > > > > > > I have the following line in /usr/local/lib/sasl2/svn.conf: > > > > > mech_list: gssapi digest-md5 anonymous > > > > > > > > > > How can I guarantee that the subversion client/server will always use > > > > > GS

Re: sasl mechanisms order

2010-07-26 Thread Victor Sudakov
Daniel Shahaf wrote: > > > > > > > > I have the following line in /usr/local/lib/sasl2/svn.conf: > > > > mech_list: gssapi digest-md5 anonymous > > > > > > > > How can I guarantee that the subversion client/server will always use > > > > GSSAPI before DIGEST-MD5? Or a more generic question, how c

Re: sasl mechanisms order

2010-07-25 Thread Daniel Shahaf
CC += dev@ Victor Sudakov wrote on Mon, Jul 26, 2010 at 12:53:44 +0700: > Daniel Shahaf wrote: > > > > > > I have the following line in /usr/local/lib/sasl2/svn.conf: > > > mech_list: gssapi digest-md5 anonymous > > > > > > How can I guarantee that the subversion client/server will always use >

Re: sasl mechanisms order

2010-07-25 Thread Victor Sudakov
Daniel Shahaf wrote: > > > > I have the following line in /usr/local/lib/sasl2/svn.conf: > > mech_list: gssapi digest-md5 anonymous > > > > How can I guarantee that the subversion client/server will always use > > GSSAPI before DIGEST-MD5? Or a more generic question, how can I change > > the orde

Re: sasl mechanisms order

2010-07-25 Thread Daniel Shahaf
Victor Sudakov wrote on Mon, Jul 26, 2010 at 09:30:19 +0700: > Colleagues, > > I have the following line in /usr/local/lib/sasl2/svn.conf: > mech_list: gssapi digest-md5 anonymous > > How can I guarantee that the subversion client/server will always use > GSSAPI before DIGEST-MD5? Or a more gene

sasl mechanisms order

2010-07-25 Thread Victor Sudakov
Colleagues, I have the following line in /usr/local/lib/sasl2/svn.conf: mech_list: gssapi digest-md5 anonymous How can I guarantee that the subversion client/server will always use GSSAPI before DIGEST-MD5? Or a more generic question, how can I change the order of mechanisms if I have to? I hav