[sasl] GS2-KRB5 interop server up and running

Simon Josefsson <simon@josefsson.org> Tue, 30 March 2010 23:27 UTC

Return-Path: <simon@josefsson.org>
X-Original-To: sasl@core3.amsl.com
Delivered-To: sasl@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 33A433A69BB for <sasl@core3.amsl.com>; Tue, 30 Mar 2010 16:27:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 4.128
X-Spam-Level: ****
X-Spam-Status: No, score=4.128 tagged_above=-999 required=5 tests=[AWL=-5.991, BAYES_50=0.001, DNS_FROM_OPENWHOIS=1.13, FB_WORD1_END_DOLLAR=3.294, FB_WORD2_END_DOLLAR=3.294, J_CHICKENPOX_45=0.6, J_CHICKENPOX_46=0.6, J_CHICKENPOX_47=0.6, J_CHICKENPOX_48=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TYyD96V3vujl for <sasl@core3.amsl.com>; Tue, 30 Mar 2010 16:27:18 -0700 (PDT)
Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by core3.amsl.com (Postfix) with ESMTP id 3267E3A68E4 for <sasl@ietf.org>; Tue, 30 Mar 2010 16:27:16 -0700 (PDT)
Received: from mocca (c80-216-24-99.bredband.comhem.se [80.216.24.99]) (authenticated bits=0) by yxa-v.extundo.com (8.14.3/8.14.3/Debian-5+lenny1) with ESMTP id o2UNRfkB015564 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT) for <sasl@ietf.org>; Wed, 31 Mar 2010 01:27:43 +0200
X-Hashcash: 1:22:100330:sasl@ietf.org::JvdDMfafdbFFpnXe:JkAj
From: Simon Josefsson <simon@josefsson.org>
To: sasl@ietf.org
OpenPGP: id=B565716F; url=http://josefsson.org/key.txt
Date: Wed, 31 Mar 2010 01:27:41 +0200
Message-ID: <87y6h9gzki.fsf@mocca.josefsson.org>
User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/23.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Virus-Scanned: clamav-milter 0.95.3 at yxa-v
X-Virus-Status: Clean
Subject: [sasl] GS2-KRB5 interop server up and running
X-BeenThere: sasl@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SASL Working Group <sasl.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/sasl>, <mailto:sasl-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sasl>
List-Post: <mailto:sasl@ietf.org>
List-Help: <mailto:sasl-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sasl>, <mailto:sasl-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Mar 2010 23:27:19 -0000

Everyone,

I have a IMAP server with GS2-KRB5 support up and running at
interop.josefsson.org, Kerberos realm is 'interop.josefsson.org' with
username 'user' and password 'pass'.  For more info on testing see:

http://blog.josefsson.org/2010/03/31/gs2-krb5-in-gnu-sasl-150/

If anyone has a GS2-KRB5 implementation, I'm interested in performing
interop testing.  For reference, see a sample GS2-KRB5 authentication
session below.  The code for my client/server is available as free
software.

(Btw, the server supports SCRAM-SHA-1 as well, username 'user' and
password 'pass'.)

/Simon

espresso:~ jas$ ~/bin/gsasl interop.josefsson.org -auser -d
Trying `interop.josefsson.org'...
* OK IMAP4rev1
. CAPABILITY
* CAPABILITY IMAP4rev1 NAMESPACE ID IDLE LITERAL+ UNSELECT AUTH=ANONYMOUS AUTH=EXTERNAL AUTH=LOGIN AUTH=PLAIN AUTH=SECURID AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=SCRAM-SHA-1 AUTH=GSSAPI AUTH=GS2-KRB5
. OK CAPABILITY Completed
. AUTHENTICATE GS2-KRB5
+ 
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
+ YHEGCSqGSIb3EgECAgIAb2IwYKADAgEFoQMCAQ+iVDBSoAMCARKhAwIBAKJGBEQ1cWBy8YoO/1EJyQK9Wbj/2SKbuL8D96QvmrmypXks1MWxNUSdLx1i/BRsOBeJkkqNM5w+1NhdVKiReccthdoWkREIVw==

. OK AUTHENTICATE GS2-KRB5 authentication successful
Client authentication finished (server trusted)...
Session finished...
. LOGOUT
* BYE Session terminating.
. OK LOGOUT Completed
espresso:~ jas$