Steven:
> Here's the idea: develop a "glue" library for each platform, that a
> downloaded applet could call. This library would call the local Kerberos
> routines, and obtain a ticket.
This approach has certainly been suggested before, though I haven't heard of any
implementations. I think our Java guy was working on it here until he went off
to that startup ... (As a side note, I tend to resist doing Java projects here
since anyone who gets Java on their resume immediately leaves for a startup 8^(.
)
I would say that it looks a lot like the other responder approaches, except that
the responder is written in Java. The attractions in this are the usual Java
attractions that the app is schlepped to the user's desktop automatically
(though the kerb support libs have to be there), and that it will work on any
Java-enabled browser. The problems are the usual Java problems that we don't
*really* trust Java security (do you?), and that the browser has to be
Java-enabled for it to work.
- RL "Bob" Morgan
ITSS/DCCS
Stanford
