[zeromq-dev] GSSAPI/Kerberos ZeroMQ

[Chris Busbey]

Hi there,

We at Connamara Systems have recently had the opportunity to implement a
Kerberos security mechanism for ZeroMQ.  This was done using GSSAPI with
great success.  We started this a few months ago using Pieter's excellent
blog series on Security as a template.

Like the other security mechanisms in libzmq, we added GSSAPI within libzmq
(our fork).  At the time, it wasn't clear how it would be possible to add
this as an external thing that lives outside of libzmq.  We also extended
our forks of czmq and jzmq to expose the mechanism.  We would like to
contribute this back into ZeroMQ if it would have us.  Is this something
that would fit within the ZeroMQ ecosystem?

Demo of "GSSHouse": https://gist.github.com/cbusbey/11265987

GSSAPI libzmq: https://github.com/connamara/libzmq
GSSAPI czmq: https://github.com/connamara/czmq
GSSAPI jzmq :https://github.com/connamara/jzmq

Thanks!

-- 
Chris Busbey
Connamara Systems, LLC
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.zeromq.org/pipermail/zeromq-dev/attachments/20140424/3584c164/attachment.htm>