Hello, In WindowsNegotiateScheme.getToken(), would it be possible to change Sspi.ISC_REQ_CONNECTION to Sspi.ISC_REQ_CONNECTION | Sspi.ISC_REQ_DELEGATE? Would it be accepted as a bug?
If you use this Wikipedia graphic as a reference, http://en.wikipedia.org/wiki/Kerberos_(protocol)#mediaviewer/File:Kerberos.svg, the current implementation in HttpClient 4.4alpha1 does the first (red) and last (green) steps but it doesn't do the middle one (middle). By adding this parameter, it won't skip out on the middle step (where the Windows LSA will ask the Windows domain controller to generate a ticket-granting-ticket for the requested service). Regards, kl --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
