[jdev] Are there any clients supporting SASL authorization identities?

[Matthias Wimmer]

Hi Alexey!


Alexey Nezhdanov wrote:
>> I just added support for SASL authorization identities to my client
>> connection manager (jadc2s). This allows to authenticate as an admin
>> user to the Jabber server, but to authorize as someone else.
>> I'd now like to know if there is already a client, that supports having
>> a different authorization identity.
>>     
> If you need just plain SASL auth then gajim supports it. Also I am sure (but 
> not know) that tkabber have the most complete realisation.
>   

No, that's not what I am looking for. I know enough clients, that have 
support to authenticate using SASL. But they all transmit no 
authorization id, and therefore they authorize as the same identity as 
they authenticate.

SASL has the concept of authorizing as someone else as you 
authenticated. But this does not seem to be supported by any Jabber 
client yet. E.g. the user admin at example.com could have the right to 
authorize as user at example.com. In that case the user admin at example.com 
would have to provide "admin at example.com" as the authentication id, the 
password for the user admin at example.com, and "user at example.com" as the 
authentication id. But it would NOT have to know or to provide the 
password for user at example.com.


Tot kijk
    Matthias

-- 
Matthias Wimmer        http://matthias.wimmer.name/
Züricher Str. 243      Tel. +49-(0)70 0770 07770
81476 München          Jabber: mawis at amessage.info