[question] Any plans to support SASL GSSAPI?

[jorgebay]

I'm specifically looking for the client side of authentication protocol exchange.

[SteveSyfuhs]

There have been a few questions about this. I'd love to, but don't have any plans. It requires creating an ASN.1 builder, which is a non-trivial thing to do. I hear one is getting built by the .NET team, so that would certainly make it easier. There are also 3rd party libraries that can be used, but I don't know of any for standard/core, and I'd like to limit the dependencies.

[jorgebay]

I've created a ticket on corefx: https://github.com/dotnet/corefx/issues/27090

[ststeiger]

@SteveSyfuhs: Doesn't BouncyCastle C-Sharp provide ASN1 ? I mean I don't know what exactly of ASN1 you need, but it's here: https://github.com/bcgit/bc-csharp/tree/master/crypto/src/asn1 Works from .NET 2.0 and also with .NET Core.

Would be cool, because then SASL GSSAPI could be added to Novell.Directory.Ldap

[SteveSyfuhs]

There's an ASN encoder/decoder builtin to this library now. SASL would be relatively straightforward to build out, though it's not clear how that would tie into GSS APIs.