Uploaded image for project: 'Kudu'
  1. Kudu
  2. KUDU-1924

Client can provide more information during auth mechanism negotiation

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Open
    • Minor
    • Resolution: Unresolved
    • 1.3.0
    • None
    • rpc, security
    • None

    Description

      Currently, the client exposes its available auth mechanisms by just listing their types, with no further information. Instead, it could provide supplemental info such as the key sequence number that signed its token, and the fingerprint of the CA cert that signed its certificate. The server could then know not to try negotiating a mechanism that is known to fail (and instead fall back to GSSAPI, for example).

      Attachments

        Activity

          People

            Unassigned Unassigned
            tlipcon Todd Lipcon
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: