Hi Alberto,

Normally no, because with Kerberos the user password is never transmitted from 
the client to magnolia, only the krb5 ticket.

If you need the password, you can perform a LDAP lookup on the user, but even 
then I don't know if it is possible to retrieve the (plaintext) password from 
AD. I almost don't think so.
However, if you need the user's credentials for further access, there is a way 
of doing this within Kerberos - I think you can use the krb5 ticket received 
from the client in some way to authenticate to other services, if you set 
things up correctly. But I don't have much experience with this, so I can't 
really help you there.

Regards from Vienna,

Richard 


> -----Ursprüngliche Nachricht-----
> Von: [email protected] [mailto:user-list-owner@magnolia-
> cms.com] Im Auftrag von Alberto Giovannone (via Magnolia Forums)
> Gesendet: Montag, 12. Mai 2014 14:32
> An: Magnolia User List
> Betreff: [magnolia-user] Re: Problem with Windows Integrated
> Authentication and Magnolia Authentication
> 
> Hi Richard,
> my login is via Kerberos, for this reason there's no problem and my
> autenthication module works very well.
> The following one is only for my curiosity : Is there a possibility to 
> retrieve the
> password (domain password) from the request/response of Magnolia after
> the Spnego authentication?
> I took a look in the header but I couldn't find anythig that reminds me the
> work of Spnego. I know that the password is not mandatory for the
> autentication after the one provides by Spnego, but when I saw the
> request/respond this doubt arose.
> 
> Thank you for your help.
> 
> Regards from Milan
> 
> Alberto Giovannone
> 
> --
> Context is everything: http://forum.magnolia-
> cms.com/forum/thread.html?threadId=be26f4c1-1b80-42bc-8de0-
> c51be72a9127
> 
> 
> ----------------------------------------------------------------
> For list details, see http://www.magnolia-cms.com/community/mailing-
> lists.html
> Alternatively, use our forums: http://forum.magnolia-cms.com/
> To unsubscribe, E-mail to: <[email protected]>
> ----------------------------------------------------------------



----------------------------------------------------------------
For list details, see http://www.magnolia-cms.com/community/mailing-lists.html
Alternatively, use our forums: http://forum.magnolia-cms.com/
To unsubscribe, E-mail to: <[email protected]>
----------------------------------------------------------------

Reply via email to