hc-httpclient-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Gregory Chanan <gcha...@cloudera.com>
Subject SPNEGO/Kerberos Auth when POST is first request
Date Wed, 14 May 2014 00:05:13 GMT
I'm using httpclient (4.3.3) in my application with SPNEGO/Kerberos Auth
and everything works well when a GET is the first request to a remote
host.  This is consistent with
http://hc.apache.org/httpcomponents-client-ga/tutorial/html/authentication.html#spnegowhich
only discusses SPNEGO with GET.

I run into problems in my application if POST is the first request; there
are a couple of different given the SPNEGO negotiation.  What I've done is
address this at the application level: if a POST is being requested, I
first generate a GET in order to trigger the SPNEGO negotiation, then send
the POST.

There are a couple of downsides to this approach, though:
1) It's inefficient because I send the GET each time a POST request is
made, not once per connection.
2) I have to change the application code everywhere httpclient requests are
made

Anyone have a suggestion for how to address this?  I was thinking of
implementing by own HttpClientConnectionManager that overrides "connect"
and sends the GET after the connection is established.  That way I address
1) because I only send the GET once per connection and 2) I can get rid of
the changes in my application code and just use normal HttpClients.

Thoughts?

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message