Re: [Freeipa-devel] Kerberos implementation issues

2011-06-23 Thread Jim Meyering
Alexander Bokovoy wrote: On 22.06.2011 20:30, Simo Sorce wrote: Quick search on the internet did not reveal any. I found a Ruby GSSAPI library if this is of any help. https://github.com/zenchild/gssapi/wiki If only iwhd were written in Ruby rather than C. Maybe you can take mod_auth_kerb

Re: [Freeipa-devel] Kerberos implementation issues

2011-06-22 Thread Sumit Bose
On Tue, Jun 21, 2011 at 04:48:08PM -0600, Pete Zaitcev wrote: On Tue, 21 Jun 2011 18:28:36 -0400 Dmitri Pal d...@redhat.com wrote: Dear Dmitri, thanks for the reply. I am reading curl source code now and I notice the distinction between Negotiate that comes from SPNEGO, and GSS-Negotiate.

Re: [Freeipa-devel] Kerberos implementation issues

2011-06-22 Thread Jim Meyering
Sumit Bose wrote: On Tue, Jun 21, 2011 at 04:48:08PM -0600, Pete Zaitcev wrote: On Tue, 21 Jun 2011 18:28:36 -0400 Dmitri Pal d...@redhat.com wrote: Dear Dmitri, thanks for the reply. I am reading curl source code now and I notice the distinction between Negotiate that comes from SPNEGO,

Re: [Freeipa-devel] Kerberos implementation issues

2011-06-22 Thread Dmitri Pal
On 06/21/2011 06:48 PM, Pete Zaitcev wrote: I am somewhat disaffected with cookies, as they have a lot of weaknesses (usually).. Certainly, turning around the 401 replies costs a lot, but until I know for myself that it cannot be avoided (by posting Authenticate header preventively), I am

Re: [Freeipa-devel] Kerberos implementation issues

2011-06-22 Thread Pete Zaitcev
On Tue, 21 Jun 2011 18:28:36 -0400 Dmitri Pal d...@redhat.com wrote: Dear Dmitri, thanks for the reply. I am reading curl source code now and I notice the distinction between Negotiate that comes from SPNEGO, and GSS-Negotiate. I'm looking for the definition of the latter. I am working on

Re: [Freeipa-devel] Kerberos implementation issues

2011-06-22 Thread Dmitri Pal
Dmitri Pal wrote: On 06/22/2011 07:44 AM, Jim Meyering wrote: Our best bet may be to find an embeddable httpd server that supports GSSAPI. Do any of you know of one? Quick search on the internet did not reveal any. I found a Ruby GSSAPI library if this is of any help.

Re: [Freeipa-devel] Kerberos implementation issues

2011-06-22 Thread Jim Meyering
Dmitri Pal wrote: Dmitri Pal wrote: On 06/22/2011 07:44 AM, Jim Meyering wrote: Our best bet may be to find an embeddable httpd server that supports GSSAPI. Do any of you know of one? Quick search on the internet did not reveal any. I found a Ruby GSSAPI library if this is of any help.

Re: [Freeipa-devel] Kerberos implementation issues

2011-06-22 Thread Dmitri Pal
On 06/22/2011 12:14 PM, Jim Meyering wrote: Sure, http://git.fedorahosted.org/git?p=iwhd.git;a=blob;f=doc/image_repo.odt Does not open for me. I tried saving but it saves as 0-byte doc -- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc.

Re: [Freeipa-devel] Kerberos implementation issues

2011-06-22 Thread Simo Sorce
On Wed, 2011-06-22 at 16:18 +0200, Jim Meyering wrote: Dmitri Pal wrote: On 06/22/2011 07:44 AM, Jim Meyering wrote: Our best bet may be to find an embeddable httpd server that supports GSSAPI. Do any of you know of one? Quick search on the internet did not reveal any. I found a

Re: [Freeipa-devel] Kerberos implementation issues

2011-06-22 Thread Pete Zaitcev
On Wed, 22 Jun 2011 09:15:48 -0400 Jeff Darcy jda...@redhat.com wrote: (1) Have we definitively concluded that it's not possible to implement the pieces we need on top of the core libmicrohttpd code? I hooked into rest.c:access_handler_0(), using MHD_lookup_connection_value and friends for

Re: [Freeipa-devel] Kerberos implementation issues

2011-06-22 Thread Alexander Bokovoy
Hi, On 22.06.2011 20:30, Simo Sorce wrote: Quick search on the internet did not reveal any. I found a Ruby GSSAPI library if this is of any help. https://github.com/zenchild/gssapi/wiki If only iwhd were written in Ruby rather than C. Maybe you can take mod_auth_kerb sources and adapt it

Re: [Freeipa-devel] Kerberos implementation issues

2011-06-21 Thread Dmitri Pal
On 06/21/2011 06:06 PM, Pete Zaitcev wrote: Dear Sumit: I heard from Mike Orazi that Dmitry recommened you as an expert in Kerberos issues. I am working on adding authentication/authorization to Image Warehouse (a.k.a. iwhd). It uses HTTP protocol, implemented with GNU Microhttpd. The