XMPP & Kerberos 5

[Russ Allbery]

wollman at bimajority.org (Garrett Wollman) writes:

> Since no commonly-used XMPP clients support GSSAPI authentication, we
> have not looked seriously at supporting it on the server side.  We do
> support it for email.

This isn't our experience, for what it's worth.  We require GSSAPI
authentication to talk to our IM servers and don't support password
authentication at all, and this works with enough clients that we have no
trouble (iChat, Adium, Pidgin on Linux or Windows, Finch).  We don't
officially support iChat because its implementation of the XMPP protocol
is very buggy, particularly around handling of SRV records, but the GSSAPI
authentication basically works.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>