Re: Kerby JWT support

2017-07-05 Thread Colm O hEigeartaigh
ge- >> From: Colm O hEigeartaigh [mailto:cohei...@apache.org] >> Sent: Tuesday, July 4, 2017 9:54 PM >> To: kerby@directory.apache.org >> Subject: Re: Kerby JWT support >> >> The problem with this is that it might be too restrictive. What if you >> wanted a

Re: Kerby JWT support

2017-07-05 Thread Colm O hEigeartaigh
idea. > > Thanks > Jiajia > > -Original Message- > From: Colm O hEigeartaigh [mailto:cohei...@apache.org] > Sent: Tuesday, July 4, 2017 9:54 PM > To: kerby@directory.apache.org > Subject: Re: Kerby JWT support > > The problem with this is that it might be

RE: Kerby JWT support

2017-07-04 Thread Li, Jiajia
4 PM To: kerby@directory.apache.org Subject: Re: Kerby JWT support The problem with this is that it might be too restrictive. What if you wanted access to the client principal or the client address etc. when creating the AuthorizationData? Maybe we could create a new class in kerb-core that encapsulates

Re: Kerby JWT support

2017-07-04 Thread Colm O hEigeartaigh
etIdentityAuthorizationData is > a good choice. > > Thanks > Jiajia > > -Original Message- > From: Colm O hEigeartaigh [mailto:cohei...@apache.org] > Sent: Tuesday, July 4, 2017 4:03 PM > To: kerby@directory.apache.org > Subject: Re: Kerby JWT support > >

RE: Kerby JWT support

2017-07-04 Thread Li, Jiajia
a -Original Message- From: Colm O hEigeartaigh [mailto:cohei...@apache.org] Sent: Tuesday, July 4, 2017 4:03 PM To: kerby@directory.apache.org Subject: Re: Kerby JWT support On Tue, Jul 4, 2017 at 3:16 AM, Li, Jiajia wrote: > > Which information in KdcRequest is used? I think the Kdc

Re: Kerby JWT support

2017-07-04 Thread Colm O hEigeartaigh
t; I think the AD token type is a new type which undefined in > spec(RFC4120->7.5.4. Authorization Data Types), I think this new type name > is ok. > > Thanks > Jiajia > > > -Original Message- > From: Colm O hEigeartaigh [mailto:cohei...@apache.org] > Sent:

RE: Kerby JWT support

2017-07-03 Thread Li, Jiajia
Data Types), I think this new type name is ok. Thanks Jiajia -Original Message- From: Colm O hEigeartaigh [mailto:cohei...@apache.org] Sent: Monday, July 3, 2017 6:18 PM To: kerby@directory.apache.org Subject: Re: Kerby JWT support OK thanks, I managed to figure it out anyway. I have two mo

Re: Kerby JWT support

2017-07-03 Thread Colm O hEigeartaigh
s this for a supplied ByteBuffer value. Should this method be > called implicitly by the AdToken code somehow? Or is it up to the client > code to call decode on KrbToken? > > Colm. > > > > > > > Thanks > > Jiajia > > > > -Original Message- &

RE: Kerby JWT support

2017-07-02 Thread Li, Jiajia
iajia -Original Message- From: Colm O hEigeartaigh [mailto:cohei...@apache.org] Sent: Friday, June 30, 2017 5:46 PM To: kerby@directory.apache.org Subject: Re: Kerby JWT support On Fri, Jun 30, 2017 at 4:16 AM, Li, Jiajia wrote: > > Yes, agree with you, credential cache it not rea

Re: Kerby JWT support

2017-06-30 Thread Colm O hEigeartaigh
; Sent: Wednesday, June 28, 2017 5:41 PM > To: Li, Jiajia > Cc: kerby@directory.apache.org > Subject: Re: Kerby JWT support > > Hi Jiajia, > > On Tue, Jun 27, 2017 at 9:37 AM, Li, Jiajia wrote: > > > > > 2) Do you mean if the credential cache is null or not set, we can skip

RE: Kerby JWT support

2017-06-29 Thread Li, Jiajia
nal Message----- From: Colm O hEigeartaigh [mailto:cohei...@apache.org] Sent: Wednesday, June 28, 2017 5:41 PM To: Li, Jiajia Cc: kerby@directory.apache.org Subject: Re: Kerby JWT support Hi Jiajia, On Tue, Jun 27, 2017 at 9:37 AM, Li, Jiajia wrote: > > 2) Do you mean if the credential cac

Re: Kerby JWT support

2017-06-28 Thread Colm O hEigeartaigh
rization data of the ticket is on the client side, so that I can test that it was inserted correctly? Colm. > > Thanks > Jiajia > > -Original Message- > From: Colm O hEigeartaigh [mailto:cohei...@apache.org] > Sent: Monday, June 19, 2017 8:24 PM > To: kerby@director

RE: Kerby JWT support

2017-06-27 Thread Li, Jiajia
kerby@directory.apache.org Subject: Kerby JWT support Hi all, I'd like to resurrect some of the issues surrounding the JWT support in Kerby. If nothing else we can hopefully agree on what the outstanding issues are and then put them into JIRA so that we have a record of what needs to be

Kerby JWT support

2017-06-19 Thread Colm O hEigeartaigh
Hi all, I'd like to resurrect some of the issues surrounding the JWT support in Kerby. If nothing else we can hopefully agree on what the outstanding issues are and then put them into JIRA so that we have a record of what needs to be done. Some of the tasks are fairly trivial and could be addresse