Github user dmansfield commented on the pull request:

    https://github.com/apache/cxf/pull/84#issuecomment-137748279
  
    There should probably be a documentation patch as well.  Can you point me 
to it?  Basically this:
    
    When determining the service principal name to be used for kerberos / 
SPNEGO, hostname canonicalization can be configured in XML as follows:
    ```
         <bean id="myAuthSupplier"
                  class="org.apache.cxf.transport.http.auth.SpnegoAuthSupplier">
             <property name="useCanonicalHostname" value="true" />
         </bean>
         <http-conf:conduit name="...">
             <http-conf:authorization>
                 <sec:AuthorizationType>Negotiate</sec:AuthorizationType>
                 <sec:Authorization>CXFClient</sec:Authorization>
             </http-conf:authorization>
             <http-conf:authSupplier bean="myAuthSupplier" />
         </http-conf:conduit>
    ```
    
    Or similarly for KerberosAuthOutInterceptor.


---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---

Reply via email to