Opened 10 years ago

Last modified 7 years ago

#10266 new Patch

Implementation of Kerberos/GSSAPI support (RFC 2228) — at Version 4

Reported by: Ken Hornstein Owned by:
Priority: normal Component: FileZilla Client
Keywords: Cc:
Component version: Operating system type:
Operating system version:

Description (last modified by Tim Kosse)

I've implemented Kerberos/GSSAPI support (RFC 2228) for the FileZilla client. I've made sure my changes work against the most recent source code of FileZilla. I've tested this on MacOS X and Windows, and I believe there should be no problems having it work on Linux.

I'd like to get this into the FileZilla source code. So ... what do I need to do to make this happen? Should I just post the patch here?

Change History (5)

comment:1 by Tim Kosse, 10 years ago

Status: newmoreinfo

Yes, please post the patch here as unified context diff against the current trunk HEAD of the FileZilla SVN repository.

by Ken Hornstein, 10 years ago

Attachment: super-patch added

Patch for GSSAPI/Kerberos support

comment:2 by Ken Hornstein, 10 years ago

Status: moreinfonew

Okay, it's been attached to this ticket. A few changes for building on Windows with MinGW have been included, but those should be obvious.

comment:3 by kpedro88, 8 years ago

Is there any possibility of getting these features included in FileZilla?

I work at a national laboratory that uses Kerberos heavily, and there is a serious lack of third-party support on Windows. Only one major SFTP GUI can use Kerberos authentication (rhymes with "ShminSCP") and it's barely functional in general.

I know that many years ago, Kerberos support was removed due to the lack of a testing environment. Perhaps the FileZilla developers can contact the kfwdev list (https://web.mit.edu/kerberos/contact.html) to establish such a test setup. There are many Windows users who would greatly appreciate being able to use FileZilla with Kerberos.

comment:4 by Tim Kosse, 7 years ago

Description: modified (diff)
Status: newmoreinfo

Please use FTP over TLS with password authentication. It's perfectly secure and MANY MANY MANY orders of magnitude easier to use than this GSS kludge. It's also much faster.

For this patch to be eligible I require instructions how to properly setup GSS infrastructure within 5 minutes on a standard Debian machine.

Note: See TracTickets for help on using tickets.