Thomas J. Moore provided a patch that introduces Kerberos5 support in (54967d2a) · Commits · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP curl

CHANGES

+4 −0

Original line number	Original line	Diff line number	Diff line
	@@ -7,6 +7,10 @@
	Changelog		Changelog

	Daniel S (1 July 2007)		Daniel S (1 July 2007)
			- Thomas J. Moore provided a patch that introduces Kerberos5 support in
			libcurl. This also makes the options change name to --krb (from --krb4) and
			CURLOPT_KRBLEVEL (from CURLOPT_KRB4LEVEL) but the old names are still

	- Song Ma helped me verify and extend a fix for doing FTP over a SOCKS4/5		- Song Ma helped me verify and extend a fix for doing FTP over a SOCKS4/5
	proxy.		proxy.

RELEASE-NOTES

+3 −1

Original line number	Original line	Diff line number	Diff line
	@@ -13,6 +13,7 @@ This release includes the following changes:

	o added CURLOPT_NEW_FILE_PERMS and CURLOPT_NEW_DIRECTORY_PERMS		o added CURLOPT_NEW_FILE_PERMS and CURLOPT_NEW_DIRECTORY_PERMS
	o improved hashing of sockets for the multi_socket API		o improved hashing of sockets for the multi_socket API
			o ftp kerberos5 support added

	This release includes the following bugfixes:		This release includes the following bugfixes:

	@@ -36,6 +37,7 @@ New curl mirrors:
	This release would not have looked like this without help, code, reports and		This release would not have looked like this without help, code, reports and
	advice from friends like these:		advice from friends like these:

	Robert Iakobashvili, James Housley, Günter Knauf, James Bursa, Song Ma		Robert Iakobashvili, James Housley, Gnter Knauf, James Bursa, Song Ma,
			Thomas J. Moore

	Thanks! (and sorry if I forgot to mention someone)		Thanks! (and sorry if I forgot to mention someone)

docs/FEATURES

+1 −1

Original line number	Original line	Diff line number	Diff line
	@@ -73,7 +73,7 @@ HTTPS (*1)
	FTP		FTP
	- download		- download
	- authentication		- authentication
	- kerberos4 (*5)		- kerberos4 (5), kerberos5 (3)
	- active/passive using PORT, EPRT, PASV or EPSV		- active/passive using PORT, EPRT, PASV or EPSV
	- single file size information (compare to HTTP HEAD)		- single file size information (compare to HTTP HEAD)
	- 'type=' URL support		- 'type=' URL support

docs/MANUAL

+8 −7

Original line number	Original line	Diff line number	Diff line
	@@ -809,18 +809,19 @@ CUSTOM OUTPUT

	curl -w 'We downloaded %{size_download} bytes\n' www.download.com		curl -w 'We downloaded %{size_download} bytes\n' www.download.com

	KERBEROS4 FTP TRANSFER		KERBEROS FTP TRANSFER

	Curl supports kerberos4 for FTP transfers. You need the kerberos package		Curl supports kerberos4 and kerberos5/GSSAPI for FTP transfers. You need
	installed and used at curl build time for it to be used.		the kerberos package installed and used at curl build time for it to be
			used.

	First, get the krb-ticket the normal way, like with the kauth tool. Then use		First, get the krb-ticket the normal way, like with the kinit/kauth tool.
	curl in way similar to:		Then use curl in way similar to:

	curl --krb4 private ftp://krb4site.com -u username:fakepwd		curl --krb private ftp://krb4site.com -u username:fakepwd

	There's no use for a password on the -u switch, but a blank one will make		There's no use for a password on the -u switch, but a blank one will make
	curl ask for one and you already entered the real password to kauth.		curl ask for one and you already entered the real password to kinit/kauth.

	TELNET		TELNET

docs/curl.1

+6 −5

Original line number	Original line	Diff line number	Diff line
	@@ -593,13 +593,14 @@ private key is. DER, PEM and ENG are supported. If not specified, PEM is
	assumed.		assumed.

	If this option is used several times, the last one will be used.		If this option is used several times, the last one will be used.
	.IP "--krb4 <level>"		.IP "--krb <level>"
	(FTP) Enable Kerberos4 authentication and use. The level must be entered and		(FTP) Enable Kerberos authentication and use. The level must be entered and
	should be one of 'clear', 'safe', 'confidential' or 'private'. Should you use		should be one of 'clear', 'safe', 'confidential' or 'private'. Should you use
	a level that is not one of these, 'private' will instead be used.		a level that is not one of these, 'private' will instead be used.

	This option requires that the library was built with Kerberos4 support. This		This option requires that the library was built with kerberos4 or GSSAPI
	is not very common. Use \fI-V/--version\fP to see if your curl supports it.		(GSS-Negotiate) support. This is not very common. Use \fI-V/--version\fP to
			see if your curl supports it.

	If this option is used several times, the last one will be used.		If this option is used several times, the last one will be used.
	.IP "-K/--config <config file>"		.IP "-K/--config <config file>"
	@@ -1153,7 +1154,7 @@ Automatic decompression of compressed files over HTTP is supported.
	.IP "NTLM"		.IP "NTLM"
	NTLM authentication is supported.		NTLM authentication is supported.
	.IP "GSS-Negotiate"		.IP "GSS-Negotiate"
	Negotiate authentication is supported.		Negotiate authentication and krb5 for ftp is supported.
	.IP "Debug"		.IP "Debug"
	This curl uses a libcurl built with Debug. This enables more error-tracking		This curl uses a libcurl built with Debug. This enables more error-tracking
	and memory debugging etc. For curl-developers only!		and memory debugging etc. For curl-developers only!