Thanks Kai. For just sending an sgt to a web server it looks relatively straight forward. Hoping to get this done tonight or Friday. Between Emmanuel's docs and Microsoft's doc and Emmanuel's code I should be able to get this going. On Nov 24, 2015 9:17 AM, "Zheng, Kai" <[email protected]> wrote:
> Marc, would you double check the ASN1 definition and make sure if it's > updated and all the ones what's needed? If so let's start with it. > It's easy to implement these types in kerby-asn1 if you're familiar with > it, or I can help if you wouldn't. To learn about the howto, > please look at how the classical Kerberos types were expressed in Kerby. > The types can be included in the kerby-core module but would > be in a separate package like org.apache.kerby.spnego.type. We're adding > many similar types for X509 and CMS, which should be committed > in a week. > > Anyway, now you have the types POJO in Java, and then you may need to > implement a SPNEGO GSSAPI mechanism or the similar thing > Using these types according to what/how you're going to talk to. If it's a > standardized GSSAPI mechanism, Kerby would love to have it. > > Just want to make more things clear. Hope it helps. > > Regards, > Kai > > -----Original Message----- > From: Marc Boorshtein [mailto:[email protected]] > Sent: Tuesday, November 24, 2015 8:30 PM > To: [email protected] > Subject: RE: SPNEGO negotiation support > > +1. This is excellent and probably the best docs I've seen on the subject. > Should make it much easier to get a prototype working. > On Nov 24, 2015 4:32 AM, "Zheng, Kai" <[email protected]> wrote: > > > The doc is cool. The test looks nice and we could incorporate. Thanks > > Emmanuel! > > > > Regards, > > Kai > > > > -----Original Message----- > > From: Emmanuel Lécharny [mailto:[email protected]] > > Sent: Tuesday, November 24, 2015 4:31 PM > > To: [email protected] > > Subject: Re: SPNEGO negotiation support > > > > Le 24/11/15 03:51, Marc Boorshtein a écrit : > > > Yep, will do. MS actually has a really good article detailing the > > > asn.1 structure. > > A long time ago (Isuspect ist was back in 2007), I wrote an ASN.1 > > SPNEGO codec here is a bit of documentation : > > https://cwiki.apache.org/confluence/display/DIRxASN1/SpnegoCodec > > Some code : > > > > http://svn.apache.org/viewvc/directory/sandbox/trunk/asn1-new-codec/sr > > c/java/org/apache/asn1/spnego/?pathrev=279970 > > and some tests : > > > > http://svn.apache.org/viewvc/directory/sandbox/trunk/asn1-new-codec/sr > > c/test/org/apache/asn1/spnego/codec/?pathrev=279970 > > > > 10 years old... Not as good as whisky though ;-) > > > > >
