geronimo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Bo Friis <>
Subject adding support for pluggable authenticators (HTTP) (adding support for SPNEGO/Kerberos)
Date Sun, 31 Oct 2004 03:25:00 GMT
Hi dev,

Im interested in support for pluggable authenticators. I have at least
one possible two types of authenticators i would like to be able to
plugin. One is SPNEGO (Kerberos over HTTP). This is supported by IE,
FireFox and Mozilla.

SPNEGO scheme requires a challenge-response scheme like the
Digest/Basic where the server must send a 401 back to the browser.

As I see it and correct me if im wrong, its not possible to plugin
custom authenticators and im not sure where to add this but I have
some suggestions.

WebApplicationContext.initLoginConfig() instansiates the authenticator
based on the web app deployment descriptor. I would prefer to have the
ability to extend this list of authenticators, alternatively the
ability to replace one of the standard authenticators.


View raw message