Re: new authentication methods?

[Yngve Svendsen]

At 17:12 22.01.2003 +0100, Werner Koch wrote:
> Hi!
>
> are there any plans for new authentication methods?
>
> I know that there is Kerberos but setting up Kerberos is not an easy
> and cheap task.  I'd very much like to use gnatsd via an already
> authenticated ssh connection.  I have not looked close at it but IIRC
> it should be possible to turn gnatsd into an ssh subsystem.
>
> Another useful option would be a CRAM-MD5 authentication.  Yes, this
> means plain text passwords on the server but this is still better than
> to let cleartext traveling over the net.
>
> I can work on this.  What I don't know is the general idea behing the
> AUTH command and the regular login.  It seems that AUTH is only used
> with Kerberos - are there other plans on how to use it?

Authentication is a part of GNATS that could definitely use some work. The 
Kerberos functionality of GNATS hasn't been worked on for a long time as 
far as I know. I do not know of anyone else planning to do work in this 
area, so if you have time to look at things, I would strongly encourage you 
to start looking at it.

Yngve Svendsen
Gnatsweb maintainer