Markus Moeller and I have made SPNEGO C APIs and Apache modules available at https://sourceforge.net/projects/modgssapache/. The project contains three packages:

fbopenssl
mod_spnego
modgssapache

fbopenssl (for lack of a better name) is a library of extensions to OpenSSL, including APIs for GSS-API and SPNEGO ASN.1 messages (or PDUs). fbopenssl has been tested on Linux, Microsoft Windows and Sun Solaris. fbopenssl still needs to be tested for memory leaks using a tool like Purify.

mod_spnego is an Apache 2.0 SPNEGO module that supports Kerberos authentication and user-level authorization. mod_spnego uses fbopenssl, MIT GSS-API and OpenSSL. mod_spnego has been tested on Linux, Microsoft Windows and Sun Solaris using Microsoft Internet Explorer 6.0. Currently, mod_spnego does not support Apache 1.3 and group-level authorization.

modgssapache is a modified version of the Apache 1.3 GSS-API module located at http://meta.cesnet.cz/software/heimdal/negotiate.en.html. This version has been modified to support SPNEGO using open-source SPNEGO APIs from Microsoft. modgssapache has been tested on Linux and Sun Solaris.

Frank

_________________________________________________________________
Get MSN 8 and enjoy automatic e-mail virus protection. http://join.msn.com/?page=features/virus


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to