#590516 jxplorer: list gssapi authentication as default when Kerberos is used

#590516#5
Date:
2010-07-26 23:09:09 UTC
From:
To:
Package: jxplorer
Version: 3.2.1+dfsg-1
Severity: wishlist

In Debian Edu, we have set up LDAP to use Kerberos authentication to
allow users to get single signon when binding to the LDAP database.
In such scenario, it would be great if the jxplorer default setting
were to use GSSAPI when connecting to the LDAP database, to allow us
to tell teachers to use jxplorer to update the LDAP directory without
forcing them to remember to switch the default setting from anonymous
to gssapi.

Could jxplorer be changed to let GSSAPI be the default bind method
when the KRB5CCNAME environment variable is set?  Its content look
like "FILE:/tmp/krb5cc_10003_QnxZlI", and point to the file with the
users kerberos ticket.

Happy hacking,

#590516#10
Date:
2010-08-04 13:36:05 UTC
From:
To:
Thanks for your bug. It made me understanding that missing
/usr/share/jxplorer/plugins directory blocks gssapi.conf file
creation. I'll fix that soon.

What about teaching teachers to create templates? Or providing
templates for them? I suppose connections to their LDAP won't change
after initial setup.


Cheers,
Gabriele

#590516#15
Date:
2010-08-13 21:28:49 UTC
From:
To:
Discovered your comment by accident.  Suspect you are not aware that
BTS do not send requestors a copy of email sent to #@bugs.debian.org
by default. :)

[Gabriele Giacone]

Is this the reason GSSAPI authentication no longer work?  If so, that
badly affect its usability in Debian Edu and it would be great if it
was fixed in Squeeze.  I am about to create a bug report about this,
just waiting for my test installation to complete.

Might be an option.  Do not know jxplorer enough to know what is
possible nor what is smart. :)

Happy hacking,

#590516#20
Date:
2010-08-14 13:24:22 UTC
From:
To:
You're right :( I thought that bug requesters was always informed about
progresses. Thank you.

I've uploaded -3. If you don't want to wait, just create
/usr/share/jxplorer/plugins directory. Next jxplorer startup will create
default gssapi.conf file under ~/.jxplorer and GSSAPI connections will
be working.
I'll try to make it accepted in squeeze.

menu Help - Contents - Configuring JXplorer - Creating a Template

Templates will be saved in ~/.jxplorer/connections.txt file.
Using templates, users don't have to insert connection info each time.

I don't know jxplorer so much too. What I can tell you is that it's
really highly customizable [1] and well documented and maybe you're also
interested in debianedu-ize it :)


Cheers,
Gabriele

[1] http://jxplorer.org/documents/customise/index.html