This is a continuation of a discussion from http://bugzilla.mozilla.org/show_bug.cgi?id=17578. Topic "I want Kerberos authentication and TGT forwarding" If this is the wrong list, please let us know and we'll move the discussion elsewhere. Also, please feel free to jump in if you have anything to add!
>Concerning the SPNEGO implementation above Mozilla API, would it be possible >to implement it as a standalone library exporting GSS-API functions (or their >subset)? In this way it would be possible to keep the Negotiate implementation >separate from the GSS-API stuff. It would be possible to implement SPNEGO using the Mozilla api and export any functions we want, including GSSAPI look-a-likes. But the problem would still remain that that the SPNEGO library would need to link to Kerberos GSS-API code. We could get around this limitation by installing the implementation as an xpi which had already been statically linked to Kerberos or possibly by patching Mozilla (or PSM) adding a configuration option to point to the machines Kerberos libraries (--with-kerberos = path/to/local/libraries). Suggestions? >To wyllys (comment #24 <http://bugzilla.mozilla.org/> ) >- You really have an SPNEGO implementation and you're willing to share it with >us? It would be great. I agree that sounds great. From your description it sounds like your implementation is MIT Kerberos specific, is that correct? Will that cause a problem for international users?
