Marc, would you double check the ASN1 definition and make sure if it's updated and all the ones what's needed? If so let's start with it. It's easy to implement these types in kerby-asn1 if you're familiar with it, or I can help if you wouldn't. To learn about the howto, please look at how the classical Kerberos types were expressed in Kerby. The types can be included in the kerby-core module but would be in a separate package like org.apache.kerby.spnego.type. We're adding many similar types for X509 and CMS, which should be committed in a week.
Anyway, now you have the types POJO in Java, and then you may need to implement a SPNEGO GSSAPI mechanism or the similar thing Using these types according to what/how you're going to talk to. If it's a standardized GSSAPI mechanism, Kerby would love to have it. Just want to make more things clear. Hope it helps. Regards, Kai -----Original Message----- From: Marc Boorshtein [mailto:[email protected]] Sent: Tuesday, November 24, 2015 8:30 PM To: [email protected] Subject: RE: SPNEGO negotiation support +1. This is excellent and probably the best docs I've seen on the subject. Should make it much easier to get a prototype working. On Nov 24, 2015 4:32 AM, "Zheng, Kai" <[email protected]> wrote: > The doc is cool. The test looks nice and we could incorporate. Thanks > Emmanuel! > > Regards, > Kai > > -----Original Message----- > From: Emmanuel Lécharny [mailto:[email protected]] > Sent: Tuesday, November 24, 2015 4:31 PM > To: [email protected] > Subject: Re: SPNEGO negotiation support > > Le 24/11/15 03:51, Marc Boorshtein a écrit : > > Yep, will do. MS actually has a really good article detailing the > > asn.1 structure. > A long time ago (Isuspect ist was back in 2007), I wrote an ASN.1 > SPNEGO codec here is a bit of documentation : > https://cwiki.apache.org/confluence/display/DIRxASN1/SpnegoCodec > Some code : > > http://svn.apache.org/viewvc/directory/sandbox/trunk/asn1-new-codec/sr > c/java/org/apache/asn1/spnego/?pathrev=279970 > and some tests : > > http://svn.apache.org/viewvc/directory/sandbox/trunk/asn1-new-codec/sr > c/test/org/apache/asn1/spnego/codec/?pathrev=279970 > > 10 years old... Not as good as whisky though ;-) > >
