[PATCH] SPNEGO version2

David Woodhouse dwmw2 at infradead.org
Tue Feb 24 05:58:03 PST 2015


On Fri, 2015-02-20 at 15:17 +0000, David Woodhouse wrote:
> On Fri, 2015-02-20 at 16:03 +0100, Nikos Mavrogiannopoulos wrote:
> > 
> > Attached are two patches over the current master. I think the previous
> > logic was a bit complex. I've tried to avoid using proxy as index in
> > the second patch.
> > It seems to work with spnego, but please review as I may have not
> > understood the logic completely.
> 
> No longer attached, since your message was too big for the list. I've
> taken the liberty of sending them as separate patches as git-send-email
> would have done, so they're easy to read in a mailer and reply inline.

Thanks.

I've massaged these into submission somewhat, and what I've pushed out
to the git repository can successfully authenticate to a proxy and VPN
server at the same time. Either by the same method, or by different
methods (I tested GSSAPI+GSSAPI, and NTLM for the proxy with GSSAPI for
the server).

We might want to add an openconnect_set_http_auth() function to parallel
the openconnect_set_proxy_auth() one?

-- 
dwmw2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5745 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20150224/66bc55a4/attachment.bin>


More information about the openconnect-devel mailing list