Hi Bruno
Thanks for sharing your experimental SPNEGO Filter!
I never used "git" before. To download your code I tried the following
(and failed)
$ git clone http://git.kato.mvc.mcc.ac.uk/bruno/spnegofilter.git/
spnegofilter
Initialized empty Git repository in /home/geus/gitwork/spnegofilter/.git/
Cannot get remote repository information.
Perhaps git-update-server-info needs to be run there?
Is it a problem on my end?
It's not a major issue though, since I can download the individual files
using a web browser.
Best regards,
Roman
Bruno Harbulot wrote:
Hi Roman,
Here is my experimental SPNEGO Filter:
http://git.kato.mvc.mcc.ac.uk/bruno/spnegofilter.git/
It provides a Negotiate and a Basic challenge at the same time.
It works at least for small tests, but it's definitely not ready for
production usage. I haven't used much of the existing Guards and
related classes; I haven't looked deeply into what would need to be
changed for this particular filter yet. You'll need Restlet 1.1-M5 or
something close enough if you want to try it out, because it uses
multiple challenges (1) and the new context system. It also requires
Java 6.
Best wishes,
Bruno.
(1) http://restlet.tigris.org/issues/show_bug.cgi?id=457
Roman Geus wrote:
Hello all
I'm new to Restlet and would like to implement a REST interface for
an existing application using Restlet and JAX-RS.
I need to support both HTTP Negotiate and HTTP Basic authentication
vs an Active Directory server.
The Restlet server should offer both authentication schemes and the
client may choose one of them and send the appropriate credentials.
The Restlet server will then validate the credentials using a
Kerberos server (Active Directory).
I don't know how to implement the dual HTTP authentication scheme in
Restlet. From looking at the code, it seems, that a custom Guard can
only implement a single scheme. How can I support a second
authentication scheme?
Also, Negotiate authentication is not supported out-of-the-box and
the Negotiate ChallengeScheme is not predefined. Is it possible to
support the Negotiate scheme without modifying the Restlet code?
Any help with this (example code, hints, pointers, ...) would be
highly appreciated.
Thanks,
Roman
--
Roman Geus
Paul Scherrer Institut
AIT
Scientific Computing
5232 Villigen PSI
Switzerland
Tel: +41 56 310 54 85
Fax: +41 56 310 36 49
e-Mail: [EMAIL PROTECTED]