taskmldonkey, a multi-networks file-sharing client - Tasks: task #6498, Allow user identification versus...

 
 

You are not allowed to post comments on this tracker with your current authentification level.

task #6498: Allow user identification versus pam/Kerberos servers.

Submitted by:  Francisco <klondike>
Submitted on:  Wed 07 Feb 2007 12:02:35 PM UTC  
 
Category: CorePriority: 3 - Low
Status: PostponedAssigned to: None
Open/Closed: OpenShould Start On: Tue 06 Feb 2007 11:00:00 PM UTC
Should be Finished on: Tue 06 Feb 2007 11:00:00 PM UTC

Tue 08 Apr 2008 02:17:18 AM UTC, comment #5:

Hi, there !

As the discussion appears to be still open, and the status of this task "just" postponed, I hope no one will be outraged by me waking up a more-than-a-year-old thread.

Being studying the use of LDAP+Kerberos for my network, I naturally came across the apps that I use to see the kind of support I could expect for such features. Which reminds me I absolutely must thank, a lot, anyone who makes Mldonkey possible, for the awesome application that it is. Runs (almost) every minute of every day at home, in its own vserver, and I'm very happy about it.

So I naturally found this thread, and searched for the existence of some kind of PAM-Ocaml lib that could help in such a task. Google led me to Wikipedia (http://en.wikipedia.org/wiki/Pluggable_Authentication_Modules ), which in turn led me to OcamlPAM (http://sharvil.nanavati.net/projects/ocamlpam/ ).

This seems a quite young project (it doesn't make a month since version 1.0 has been released), which aims at providing an Ocaml wrapper to the PAM system... which may be what was missing to ease things, if I understand it right.

I don't know wether spiralvoice's "To make it clear" statement concerned the piece of code that OcamlPAM seems to offer, or if it generally concerned PAM authentication, but it would really be a cool feature, allowing one to use LDAP, Kerberos or virtually any-PAM-supported-thing, to manage authentication. I also guess it would be quite an interesting prerequesite to an advanced multi-user system in MLDonkey.

I really regret not being able to provide some kind of patch (I totally lack the abilities), but as I came around this interesting piece of information (ahem... at least, I hope it is), I thought it could be useful to point it out.

Aefron <aefron>
Wed 07 Feb 2007 06:19:31 PM UTC, comment #4:

Ocaml can interface with C code:
http://caml.inria.fr/pub/docs/manual-ocaml/manual032.html

Swig ( http://www.swig.org ) can help to create the
Ocaml bindings needed to interface with external libs.

To make this clear, I will not code such a function
because I am not interested in that. If someone provides
a working patch, which is portable and allows usage of
MLDonkey without Kerberos/PAM, it will be committed to CVS.

spiralvoice <spiralvoice>
Project Administrator
Wed 07 Feb 2007 02:49:50 PM UTC, comment #3:

Anyway we can use an external authentifier based on other language, such as C to do that work; can't we?

Francisco <klondike>
Wed 07 Feb 2007 12:02:35 PM UTC, comment #2:

This item has been reassigned from the project mldonkey, a multi-networks file-sharing client bugs tracker to your tracker.

The original report is still available at bugs #18981

Following are the information included in the original report:

[field #0] Item ID: 18981
[field #1] Group ID: 1409
[field #2] Open/Closed: Open
[field #3] Severity: 3 - Normal
[field #4] Privacy: Public
[field #8] : Unknown bugs Field Display Type
[field #9] Category: Core
[field #10] Submitted by: klondike
[field #11] Assigned to: None
[field #12] Submitted on: Mittwoch 07.02.2007 um 03:03
[field #13] Summary: Allow user identification versus pam/Kerberos servers.
[field #14] Original Submission: Hi again. In order to allow the centralization of services within the same machine/network it ll be very useful allowing the users to authenticate versus pam and/or kerberos instead of using the actual sytem. I ve tought on using some kind of flag or group which activates this feature.

Thanks.
[field #16] Item Group: Feature request
[field #17] Status: None
[field #18] Component Version: None
[field #19] Operating System: Linux
[field #20] Reproducibility: None
[field #21] Size (loc): None
[field #22] Fixed Release: None
[field #23] Planned Release: None
[field #24] Effort: 0.00
[field #28] Priority: 5 - Normal
[field #31] Percent Complete: 0%
[field #33] Release: None
[field #58] Binaries Origin: Gentoo ebuild
[field #59] CPU type: Intel x86
[field #60] CPU: None
[field #61] Custom Select Box #4: None
[field #62] Custom Select Box #5: None
[field #63] Custom Select Box #6: None
[field #64] Custom Select Box #7: None
[field #65] Custom Select Box #8: None
[field #66] Custom Select Box #9: None
[field #67] Custom Select Box #10: None

spiralvoice <spiralvoice>
Project Administrator
Wed 07 Feb 2007 12:02:34 PM UTC, comment #1:

This will be difficult to implement because there no
libraries to use Kerberos/PAM from Ocaml:

http://merjis.com/developers/pgocaml
"Kerberos authentication isn't implemented, and probably can't be because there aren't any Kerberos client libraries for OCaml."

http://article.gmane.org/gmane.comp.lang.caml.inria/28917/match=ocaml+kerberos
"Does anyone know of a Kerberos module for OCaml? I'm thinking of using Kerberos in an application I'm developing, but I can't seem to find an OCaml module for it. I just wanted to check and see if anybody knows of one before I start trying to make one. Thanks!"

spiralvoice <spiralvoice>
Project Administrator
Wed 07 Feb 2007 12:02:35 PM UTC, original submission:

Hi again. In order to allow the centralization of services within the same machine/network it'll be very useful allowing the users to authenticate versus pam and/or kerberos instead of using the actual sytem. I've tought on using some kind of flag or group which activates this feature.

Thanks.

Francisco <klondike>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by aefron (Posted a comment)
  • -unavailable- added by spiralvoice (Posted a comment)
  • -unavailable- added by klondike (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 4 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Fri 31 Aug 2007 09:42:25 PM UTCspiralvoiceCategoryNone=>Core
      StatusNone=>Postponed
    Wed 07 Feb 2007 06:19:31 PM UTCspiralvoicePriority5 - Normal=>3 - Low
    Wed 07 Feb 2007 12:02:36 PM UTCspiralvoiceReassign itemmldonkey, a multi-networks file-sharing client, bug #18981=>mldonkey, a multi-networks file-sharing client, task #6498

    Back to the top


    Powered by Savane 3.1-cleanup