Return-Path: Delivered-To: apmail-directory-dev-archive@www.apache.org Received: (qmail 72613 invoked from network); 1 Jun 2007 23:03:34 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 1 Jun 2007 23:03:34 -0000 Received: (qmail 92842 invoked by uid 500); 1 Jun 2007 23:03:38 -0000 Delivered-To: apmail-directory-dev-archive@directory.apache.org Received: (qmail 92799 invoked by uid 500); 1 Jun 2007 23:03:38 -0000 Mailing-List: contact dev-help@directory.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Apache Directory Developers List" Delivered-To: mailing list dev@directory.apache.org Received: (qmail 92788 invoked by uid 99); 1 Jun 2007 23:03:38 -0000 Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 01 Jun 2007 16:03:38 -0700 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: neutral (herse.apache.org: local policy) Received: from [212.27.42.35] (HELO smtp5-g19.free.fr) (212.27.42.35) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 01 Jun 2007 16:03:32 -0700 Received: from [192.168.0.1] (vol75-3-82-66-216-176.fbx.proxad.net [82.66.216.176]) by smtp5-g19.free.fr (Postfix) with ESMTP id 70A0A448A1 for ; Sat, 2 Jun 2007 01:03:11 +0200 (CEST) Message-ID: <4660A5AF.6090704@apache.org> Date: Sat, 02 Jun 2007 01:03:11 +0200 From: Emmanuel Lecharny User-Agent: Mozilla Thunderbird 1.0.7 (X11/20050923) X-Accept-Language: fr, en MIME-Version: 1.0 To: Apache Directory Developers List Subject: Re: OT kerberos, iwa and proxys References: <800df6390706011547k55ff636fva06b6c2cab7a13d@mail.gmail.com> In-Reply-To: <800df6390706011547k55ff636fva06b6c2cab7a13d@mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Virus-Checked: Checked by ClamAV on apache.org Marc Boorshtein a �crit : > All, Hi Marc, > > I've got an kerberos question when cobined with integrated windows > authentication. Can the process of authenticating the user to an iis > server be proxied succesfully? so far, I think you just need to enable SPNEGO on you browser to do so (http://publib.boulder.ibm.com/infocenter/wasinfo/v6r1/index.jsp?topic=/com.ibm.websphere.base.doc/info/aes/ae/tsec_SPNEGO_config_web.html ) Of couse, this will be helpfull if you are just using a browser... Otherwise, your application will have to implement SPNEGO. FYI, we have written a java codec for this protocol, but it has been sandboxed... Just tell us if you want it to be ressucitated. Emmanuel. > > Thanks for any input. > > Marc > > > On 6/1/07, Alex Karasulu wrote: > >> On 6/1/07, Emmanuel Lecharny wrote: >> >> SNIP >> >> BasicAttributes to a more ldap compliant BasicAttributesImpl...) >> >> >> What about renaming BasicAttributesImpl to just LdapAttributes? Of >> course >> not in the 1.0 branch which would break backwards compatibility of >> partitions but in the 1.5 branch? Guess really it's the 0.9.6 branch of >> shared for 1.5 of ApacheDS. >> >> Anyway this would be clearer no? >> >> Alex >> >