Re: SPNEGO negotiation support

Le 24/11/15 03:51, Marc Boorshtein a écrit : > Yep, will do. MS actually has a really good article detailing the asn.1 > structure. A long time ago (Isuspect ist was back in 2007), I wrote an ASN.1 SPNEGO codec here is a bit of documentation :

RE: SPNEGO negotiation support

The doc is cool. The test looks nice and we could incorporate. Thanks Emmanuel! Regards, Kai -Original Message- From: Emmanuel Lécharny [mailto:elecha...@gmail.com] Sent: Tuesday, November 24, 2015 4:31 PM To: kerby@directory.apache.org Subject: Re: SPNEGO negotiation support Le 24/11

RE: SPNEGO negotiation support

-Original Message- From: Marc Boorshtein [mailto:mboorsht...@gmail.com] Sent: Tuesday, November 24, 2015 8:30 PM To: kerby@directory.apache.org Subject: RE: SPNEGO negotiation support +1. This is excellent and probably the best docs I've seen on the subject. Should make it much easier to get

RE: SPNEGO negotiation support

it. > > Just want to make more things clear. Hope it helps. > > Regards, > Kai > > -Original Message- > From: Marc Boorshtein [mailto:mboorsht...@gmail.com] > Sent: Tuesday, November 24, 2015 8:30 PM > To: kerby@directory.apache.org > Subject: RE

SPNEGO negotiation support

Sounds great, Marc. I will continue to fix and test the path of using TGS-REQ to request a service ticket against MIT KDC. >> now I just need to figure out how to convert that into a SPNEGO negotiate >> header. It would be good to support SPNEGO negotiation in Kerby. I haven't got the time to

Re: SPNEGO negotiation support

On Tue, Nov 24, 2015 at 7:05 AM, Zheng, Kai wrote: > Sounds great, Marc. I will continue to fix and test the path of using > TGS-REQ to request a service ticket against MIT KDC. > > >> now I just need to figure out how to convert that into a SPNEGO > negotiate header. > It

RE: SPNEGO negotiation support

November 24, 2015 8:18 AM To: kerby@directory.apache.org Subject: Re: SPNEGO negotiation support On Tue, Nov 24, 2015 at 7:05 AM, Zheng, Kai <kai.zh...@intel.com> wrote: > Sounds great, Marc. I will continue to fix and test the path of using > TGS-REQ to request a service ticket again

RE: SPNEGO negotiation support

] Sent: Tuesday, November 24, 2015 8:29 AM To: kerby@directory.apache.org Subject: RE: SPNEGO negotiation support >> this negotiation happens between HTTP client and HTTP server, >> kerberos has nothing to do with it Yeah, kinds of so. It would be good if Marc could give more details.

RE: SPNEGO negotiation support

d further discussion here before we dive into the > support. Thanks. > > Regards, > Kai > > -Original Message- > From: Zheng, Kai [mailto:kai.zh...@intel.com] > Sent: Tuesday, November 24, 2015 8:29 AM > To: kerby@directory.apache.org > Subject: RE: SPNEGO negotiation suppo

RE: SPNEGO negotiation support

ent: Tuesday, November 24, 2015 10:12 AM To: kerby@directory.apache.org Subject: RE: SPNEGO negotiation support So while technically spnego is supposed to be independent of kerberos from a practical standpoint spnego isn't used without kerberos. Java does come with a gssapi implementation

RE: SPNEGO negotiation support

ypes. Maybe you > could fire an issue and give those ASN1 types we need to support first? > > -Original Message- > From: Marc Boorshtein [mailto:mboorsht...@gmail.com] > Sent: Tuesday, November 24, 2015 10:12 AM > To: kerby@directory.apache.org > Subject: RE: SPNEGO ne