directory-kerby mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Kiran Ayyagari <kayyag...@apache.org>
Subject Re: SPNEGO negotiation support
Date Tue, 24 Nov 2015 00:18:29 GMT
On Tue, Nov 24, 2015 at 7:05 AM, Zheng, Kai <kai.zheng@intel.com> wrote:

> Sounds great, Marc. I will continue to fix and test the path of using
> TGS-REQ to request a service ticket against MIT KDC.
>
> >> now I just need to figure out how to convert that into a SPNEGO
> negotiate header.
> It would be good to support SPNEGO negotiation in Kerby. I haven't got the
> time to review related specs, but the first thing would be to implement
> those ASN1 types. Maybe you could fire an issue and give those ASN1 types
> we need to support first?
>
this negotiation happens between HTTP client and HTTP server, kerberos has
nothing to do with it

>
> Let's discuss this in a new thread. Thanks.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Marc Boorshtein [mailto:mboorshtein@gmail.com]
> Sent: Tuesday, November 24, 2015 4:50 AM
> To: kerby@directory.apache.org
> Subject: Re: KDC is rejecting my TGS
>
> OK, so that DOES get me an SGT!  now I just need to figure out how to
> convert that into a SPNEGO negotiate header.  Any thoughts?
>



-- 
Kiran Ayyagari
http://keydap.com

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message