build windows distribution with SSPI support (pycurl related)
Bug #244435 reported by
anatoly techtonik
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Bazaar |
Confirmed
|
Low
|
Unassigned | ||
PycURL |
New
|
Undecided
|
Unassigned |
Bug Description
Windows binaries (at least for bzr-1.5) are distributed without SSPI support in pycurl library. SSPI allows using domain login/pass for authentication against domain proxies without entering credentials explicitly. At present these credentials should be set in HTTP_PROXY environment variable in order to authenticate properly that imposes a great security risk.
Modification require building SSPI into pycurl and allowing empty username and pasword to be specified in proxy configuration (as equvalent to "-U :" command line curl option).
Changed in bzr: | |
importance: | Undecided → Low |
status: | New → Triaged |
security vulnerability: | yes → no |
Changed in bzr: | |
status: | Triaged → Confirmed |
tags: | added: check-for-breezy |
To post a comment you must log in.
I'm not sure how relevant this is yet - but pywin32 supports SSPI authentication. Hooking it into urllib, or into existing "auth hooks" that may have been provided will probably be a challenge, but not impossible.