Re: gnome-keyring Problems integrating DBus code into Gnome Keyring

[David Woodhouse <dwmw2 infradead org>]

On Tue, 2011-06-07 at 19:46 +0000, Stef Walter wrote:
> 
> > 1. I would suggest a DBus interface that looks like this:
> >
> > org.gnome.keyring.Auth.NtlmAuthentication:
> >     SignChallenge(in ByteArray input, out ByteArray output)
> 
> I've prototyped this, although with some slight changes here:
> 
> https://bugzilla.gnome.org/show_bug.cgi?id=652074

Thank you. With a couple of fixes as discussed on IRC, this is now
working nicely:
	http://git.infradead.org/users/dwmw2/gnome-keyring.git
	git://git.infradead.org/users/dwmw2/gnome-keyring.git

I've been testing it with:
 dbus-send  --print-reply --dest=org.gnome.keyring /org/freedesktop/secrets/collection/login org.gnome.keyring.Credential.Ntlm.StartChallenge
 dbus-send  --print-reply --dest=org.gnome.keyring /org/freedesktop/secrets/collection/login org.gnome.keyring.Credential.Ntlm.SignChallenge string:$TYPE2 string:GER\\dwoodhou

I'll leave Chris and Stephen to:
 - Provide a replacement for Samba's /usr/bin/ntlm_auth which uses this.
 - Implement a Kerberos TGT-fetching function, using this as a template.
 - Augment krb5-auth-dialog to use that.

There is slight complexity in the Kerberos TGT fetch, because it can
take a long time so we can't use a synchronous DBus method call for it.
It'll have to be a function to start the attempt, and some kind of
signal or something on completion. Stephen, I think you can handle that?

-- 
dwmw2