[OpenAFS-devel] RT, Gerrit, Release Management changes

[Russ Allbery]

Jeffrey Altman <jaltman@your-file-system.com> writes:
> On 10/8/2012 1:09 AM, Troy Benjegerdes wrote:

>> Before I bother with an RFC that nobody other than me cares about, I'd
>> like to see gerrit.openafs.org *use* the following RFCs, so that I can 
>> trivially log in when authenticated to my own local cell:
>> 
>> http://tools.ietf.org/html/rfc4120
>> http://tools.ietf.org/html/rfc4178
>> http://tools.ietf.org/html/rfc4559

> Gerrit supports OpenID.  It does not to the best of my knowledge support
> GSS-API authentication.  If you would like to add GSS-API authentication
> to Gerrit, please discuss it on the Gerrit mailing lists, not on this one.

Specifically, Gerrit is a Java application that uses its own embedded ssh
server that supports public key authentication.  This isn't a product that
we modify; we just use it as-is.  Java itself supports GSS-API, but I
don't know that anyone has gotten the embedded ssh support to handle
GSS-API.  That would be a great project for someone.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>