Re: SPNEGO/NEGOTIATE implementation for Apache Geronimo

2010-02-08 Thread Ashish Jain
Dear Developers, I have successfully developed a patch which enables spnego authentication in Tomcat. This patch also enables fallback in case Spnego authentication fails. Can you kindly review and provide comments on the attached patch. Here is the link for the bug raised in b'zilla (

Re: SPNEGO/NEGOTIATE implementation for Apache Geronimo

2009-12-10 Thread Ashish Jain
Yes I am using a Spnego enabled browser and my motto is to enable single sign in geronimo through spnego. As of now I have a small POC of spnego working were it is able to recoganise the src machine, target machine and is able to establish a security context between client and server. However

Re: SPNEGO/NEGOTIATE implementation for Apache Geronimo

2009-12-09 Thread Ashish Jain
Hi folks, Can you please suggest if there is anyway to disable the prompt for username and password when using basic authentication?? Thanks and Regards Ashish On 11/13/09, Costin Manolache cos...@gmail.com wrote: On Fri, Nov 13, 2009 at 6:44 AM, Mark Thomas ma...@apache.org wrote: Ashish

Re: SPNEGO/NEGOTIATE implementation for Apache Geronimo

2009-12-09 Thread David Jencks
On Dec 9, 2009, at 5:03 AM, Ashish Jain wrote: Hi folks, Can you please suggest if there is anyway to disable the prompt for username and password when using basic authentication?? That's browser behavior, so the only thing you can do from the server side is not use plain BASIC auth. Are

SPNEGO/NEGOTIATE implementation for Apache Geronimo

2009-11-13 Thread Ashish Jain
Hi All, I am working on an implementation for SPENGO/NEGOTIATE implementation for geronimo. I have done some research on this and have come to the following conclusion to develop one implementation for geronimo. 1) Browser access a secured resource 2) Our custom authenticator will respond with

Re: SPNEGO/NEGOTIATE implementation for Apache Geronimo

2009-11-13 Thread Mark Thomas
Ashish Jain wrote: 4) Does this require code changes to BasicAuthenticator FormAuthenticator, AuthenticatorBase of tomcat. Basic and form - no. Base - maybe. Please provide your comment and suggestions. My instinct (that may be wrong) is that you'll need a new authenticator. If you get this

Re: SPNEGO/NEGOTIATE implementation for Apache Geronimo

2009-11-13 Thread Costin Manolache
On Fri, Nov 13, 2009 at 6:44 AM, Mark Thomas ma...@apache.org wrote: Ashish Jain wrote: 4) Does this require code changes to BasicAuthenticator FormAuthenticator, AuthenticatorBase of tomcat. Basic and form - no. Base - maybe. Please provide your comment and suggestions. My instinct