taskmldonkey, a multi-networks file-sharing client - Tasks: task #6498, Allow user identification versus...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

task #6498: Allow user identification versus pam/Kerberos servers.

Submitter:  Francisco <klondike>
Submitted:  Wed 07 Feb 2007 12:02:35 PM UTC
   
 
Category:  Core Priority:  3 - Low
Status:  Postponed Assigned to:  None
Open/Closed:  Open Should Start On:  Tue 06 Feb 2007 11:00:00 PM UTC
Should be Finished on:  Tue 06 Feb 2007 11:00:00 PM UTC

Tue 08 Apr 2008 02:17:18 AM UTC, comment #5: 

Hi, there !

As the discussion appears to be still open, and the status of this task "just" postponed, I hope no one will be outraged by me waking up a more-than-a-year-old thread.

Being studying the use of LDAP+Kerberos for my network, I naturally came across the apps that I use to see the kind of support I could expect for such features. Which reminds me I absolutely must thank, a lot, anyone who makes Mldonkey possible, for the awesome application that it is. Runs (almost) every minute of every day at home, in its own vserver, and I'm very happy about it.

So I naturally found this thread, and searched for the existence of some kind of PAM-Ocaml lib that could help in such a task. Google led me to Wikipedia (http://en.wikipedia.org/wiki/Pluggable_Authentication_Modules ), which in turn led me to OcamlPAM (http://sharvil.nanavati.net/projects/ocamlpam/ ).

This seems a quite young project (it doesn't make a month since version 1.0 has been released), which aims at providing an Ocaml wrapper to the PAM system... which may be what was missing to ease things, if I understand it right.

I don't know wether spiralvoice's "To make it clear" statement concerned the piece of code that OcamlPAM seems to offer, or if it generally concerned PAM authentication, but it would really be a cool feature, allowing one to use LDAP, Kerberos or virtually any-PAM-supported-thing, to manage authentication. I also guess it would be quite an interesting prerequesite to an advanced multi-user system in MLDonkey.

I really regret not being able to provide some kind of patch (I totally lack the abilities), but as I came around this interesting piece of information (ahem... at least, I hope it is), I thought it could be useful to point it out.

 Aefron <aefron>
Wed 07 Feb 2007 06:19:31 PM UTC, comment #4: 

Ocaml can interface with C code:
http://caml.inria.fr/pub/docs/manual-ocaml/manual032.html

Swig ( http://www.swig.org ) can help to create the
Ocaml bindings needed to interface with external libs.

To make this clear, I will not code such a function
because I am not interested in that. If someone provides
a working patch, which is portable and allows usage of
MLDonkey without Kerberos/PAM, it will be committed to CVS.

 spiralvoice <spiralvoice>
Group administrator
Wed 07 Feb 2007 02:49:50 PM UTC, comment #3: 

Anyway we can use an external authentifier based on other language, such as C to do that work; can't we?

 Francisco <klondike>
Wed 07 Feb 2007 12:02:35 PM UTC, comment #2: 

This item has been reassigned from the project mldonkey, a multi-networks file-sharing client bugs tracker to your tracker.

The original report is still available at bugs #18981

Following are the information included in the original report:

[field #0]                  Item ID: 18981
[field #1]                 Group ID: 1409
[field #2]              Open/Closed: Open
[field #3]                 Severity: 3 - Normal
[field #4]                  Privacy: Public
[field #8]                         : Unknown bugs Field Display Type
[field #9]                 Category: Core
[field #10]             Submitted by: klondike
[field #11]              Assigned to: None
[field #12]             Submitted on: Mittwoch 07.02.2007 um 03:03
[field #13]                  Summary: Allow user identification versus pam/Kerberos servers.
[field #14]      Original Submission: Hi again. In order to allow the centralization of services within the same machine/network it ll be very useful allowing the users to authenticate versus pam and/or kerberos instead of using the actual sytem. I ve tought on using some kind of flag or group which activates this feature.

Thanks.
[field #16]               Item Group: Feature request
[field #17]                   Status: None
[field #18]        Component Version: None
[field #19]         Operating System: Linux
[field #20]          Reproducibility: None
[field #21]               Size (loc): None
[field #22]            Fixed Release: None
[field #23]          Planned Release: None
[field #24]                   Effort: 0.00
[field #28]                 Priority: 5 - Normal
[field #31]         Percent Complete: 0%
[field #33]                  Release: None
[field #58]          Binaries Origin: Gentoo ebuild
[field #59]                 CPU type: Intel x86
[field #60]                      CPU: None
[field #61]     Custom Select Box #4: None
[field #62]     Custom Select Box #5: None
[field #63]     Custom Select Box #6: None
[field #64]     Custom Select Box #7: None
[field #65]     Custom Select Box #8: None
[field #66]     Custom Select Box #9: None
[field #67]    Custom Select Box #10: None

 spiralvoice <spiralvoice>
Group administrator
Wed 07 Feb 2007 12:02:34 PM UTC, comment #1: 

This will be difficult to implement because there no
libraries to use Kerberos/PAM from Ocaml:

http://merjis.com/developers/pgocaml
"Kerberos authentication isn't implemented, and probably can't be because there aren't any Kerberos client libraries for OCaml."

http://article.gmane.org/gmane.comp.lang.caml.inria/28917/match=ocaml+kerberos
"Does anyone know of a Kerberos module for OCaml?  I'm thinking of using Kerberos in an application I'm developing, but I can't seem to find an OCaml module for it.  I just wanted to check and see if anybody knows of one before I start trying to make one.  Thanks!"

 spiralvoice <spiralvoice>
Group administrator
Wed 07 Feb 2007 12:02:35 PM UTC, original submission:  

Hi again. In order to allow the centralization of services within the same machine/network it'll be very useful allowing the users to authenticate versus pam and/or kerberos instead of using the actual sytem. I've tought on using some kind of flag or group which activates this feature.

Thanks.

 Francisco <klondike>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by aefron (Posted a comment)
  • -email is unavailable- added by spiralvoice (Posted a comment)
  • -email is unavailable- added by klondike (Submitted the item)

    •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2007-08-31 spiralvoice CategoryNone Core
        StatusNone Postponed
    2007-02-07 spiralvoice Priority5 - Normal 3 - Low
    2007-02-07 spiralvoice Reassign itemmldonkey, a multi-networks file-sharing client, bug #18981 mldonkey, a multi-networks file-sharing client, task #6498

    Back to the top

    Copyright © 2024 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.13-54b4.
    Corresponding source code