Hi I work in an organisation which uses libcurl for kerberos authentication to a tomcat servlet using curl(i.e libcurl is the basis for the client program, whereas tomcat sevlet is the server)
For this I have built curl with spnego and gss-negotiate support in windows,(an arduous task, with gssapi, spnego, openssl and fbopenssl one after the other built) and finally getting it to work by command line. Right now the issue is that curl always picks up default credentials(whether i pass username-password or not). This is unacceptable to the organisation, since we wish to enable non sso(single sign on) solutions for our clients. I have identified the affected code. It resided in the init_sec_context call in http_negotiate.c call. It always uses the default credentials(GSS_C_NO_CREDENTIAL flag is responsible) in line 245 of my version(libcurl 7.19.6). I have developed a fix and am currently validating and testing with my superiors before applying. My patch is highly prototypical in nature ( right now i plan on setting on usename password hardcoded). However that is a minor issue. Since I am new to programming in large projects, I wish to make a contribution upstream and I do not know the procedure. I have the setup to test my changes. I appeal to the principal curl developers to direct me regarding this matter Yours faithfully -- Arunav Sanyal 4th year undergraduate student B.E (Hons) Computer Science BITS Pilani K.K Birla Goa Campus
------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html
