<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Wed Feb 07 21:10:39 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[CDRIVER-792] Investigate replacing cyrus-sasl with libkrb5/heimdal for GSSAPI</title>
                <link>https://jira.mongodb.org/browse/CDRIVER-792</link>
                <project id="10030" key="CDRIVER">C Driver</project>
                    <description>&lt;p&gt;This could simplify builds on OSX and other platforms (at the very least removing a build dep on OSX). Note that OSX Lion replaced MIT Kerberos with Heimdal, which is API compatible.&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://wiki.ncsa.illinois.edu/display/ITS/Kerberos+on+Mac+OS+X+10.7+and+later&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://wiki.ncsa.illinois.edu/display/ITS/Kerberos+on+Mac+OS+X+10.7+and+later&lt;/a&gt;&lt;/p&gt;</description>
                <environment></environment>
        <key id="224949">CDRIVER-792</key>
            <summary>Investigate replacing cyrus-sasl with libkrb5/heimdal for GSSAPI</summary>
                <type id="3" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14718&amp;avatarType=issuetype">Task</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="9">Done</resolution>
                                        <assignee username="bjori">Hannes Magnusson</assignee>
                                    <reporter username="bernie@mongodb.com">Bernie Hackett</reporter>
                        <labels>
                    </labels>
                <created>Mon, 10 Aug 2015 20:09:02 +0000</created>
                <updated>Tue, 11 Dec 2018 15:12:34 +0000</updated>
                            <resolved>Thu, 25 May 2017 23:07:13 +0000</resolved>
                                                    <fixVersion>1.7.0</fixVersion>
                                                        <votes>0</votes>
                                    <watches>3</watches>
                                                                                                                <comments>
                            <comment id="1580494" author="bjori" created="Thu, 25 May 2017 23:07:13 +0000"  >&lt;p&gt;The task as described is concluded.&lt;/p&gt;


&lt;p&gt;It was a mistake to actually use cyrus-sasl for anything at all and we should have gone with RFC compliant implementation from the get-go.&lt;/p&gt;

&lt;p&gt;This will give use support for macOS native GSS framework, and we could technically completely remove cyrus-sasl as afaict all platform support one or another RFC compliant library... Although I am an not suggesting we do so in the near term.&lt;/p&gt;

&lt;p&gt;To that end, see &lt;a href=&quot;https://jira.mongodb.org/browse/CDRIVER-2170&quot; title=&quot;Add support for RFC 2744 GSS-API&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CDRIVER-2170&quot;&gt;&lt;del&gt;CDRIVER-2170&lt;/del&gt;&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1553241" author="bjori" created="Thu, 20 Apr 2017 00:23:29 +0000"  >&lt;p&gt;plumbs: &lt;a href=&quot;https://github.com/bjori/mongo-c-driver/commit/6c6eee4c8ff78e79829721a2164dc346973233aa&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/bjori/mongo-c-driver/commit/6c6eee4c8ff78e79829721a2164dc346973233aa&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1535130" author="bjori" created="Tue, 28 Mar 2017 18:16:28 +0000"  >&lt;p&gt;The &quot;GSS Framework&quot; seems to be API compatible with the legacy &quot;gssapi&quot;/heimdal libraries.&lt;br/&gt;
The difference is how you link in the libraries. The GSS Framework is supported by macOS 10.7+ &amp;amp; iPhone 5.0&lt;/p&gt;</comment>
                            <comment id="1535091" author="behackett" created="Tue, 28 Mar 2017 17:52:59 +0000"  >&lt;p&gt;That&apos;s the high level GSSAPI API from &lt;a href=&quot;https://tools.ietf.org/html/rfc2743&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://tools.ietf.org/html/rfc2743&lt;/a&gt;, which both MIT krb5 and heimdal (including Apple&apos;s version of heimdal) implement. Also, pykerberos is an Apple library (note the github project).&lt;/p&gt;</comment>
                            <comment id="1535057" author="bjori" created="Tue, 28 Mar 2017 17:37:04 +0000"  >&lt;p&gt;Apple has deprecated all implementations except for the one they provide as part of their &quot;Frameworks&quot;, GSS.&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://developer.apple.com/reference/gss/gss_functions?language=objc&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://developer.apple.com/reference/gss/gss_functions?language=objc&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="1535031" author="behackett" created="Tue, 28 Mar 2017 17:07:38 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=bjori&quot; class=&quot;user-hover&quot; rel=&quot;bjori&quot;&gt;bjori&lt;/a&gt;, this could be handled in the same manner as SSPI support, just using pykerberos as a reference instead of winkerberos:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://github.com/apple/ccs-pykerberos/blob/master/src/kerberosgss.c&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/apple/ccs-pykerberos/blob/master/src/kerberosgss.c&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;That project works with both libkrb5 and heimdal.&lt;/p&gt;</comment>
                            <comment id="1533322" author="jesse" created="Mon, 27 Mar 2017 16:10:32 +0000"  >&lt;p&gt;Good point.&lt;/p&gt;</comment>
                            <comment id="1533132" author="behackett" created="Mon, 27 Mar 2017 13:38:14 +0000"  >&lt;p&gt;Native auth on OSX? The native GSSAPI library on OSX is heimdal. We still require cyrus-sasl for OSX AFAIK.&lt;/p&gt;</comment>
                            <comment id="1533100" author="jesse" created="Mon, 27 Mar 2017 12:46:58 +0000"  >&lt;p&gt;Superseded by native auth on OSX and Windows.&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                                                <inwardlinks description="is related to">
                                        <issuelink>
            <issuekey id="387158">CDRIVER-2170</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10857" key="com.pyxis.greenhopper.jira:gh-epic-link">
                        <customfieldname>Epic Link</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>CDRIVER-797</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hscft3:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            </customfields>
    </item>
</channel>
</rss>