Re: gs2 and qop

[Jeffrey Hutzelman <jhutz@xxxxxxx>]

On Fri, 8 Sep 2006, Sam Hartman wrote:

> I don't expect there to be any authentication only gss mechanisms on
> the standards track either.
>
> But there are mechanisms not on the standards track.  And my point is
> that as an individual I want a standards track solution for using any
> gss mechanisms as sasl mechanisms--even if those mechanisms are not on
> the standards track themselves.

Right.  We know from people like Martin Rex that there are a wide variety
of GSS mechanisms out there that most of us have never seen.  We also know
that some of the vendors of these mechansims go to some effort to make
sure they are usable with SAP, which suggests there are people out there
who have them deployed.

It would be rather ironic if some sites could use their chosen
authentication infrastructure with SAP but not IMAP, SMTP, or LDAP.

-- Jeff