hc-httpclient-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From K Fung <kfung4...@gmail.com>
Subject Supporting delegated credentials (ISC_REQ_DELEGATE) via ClientWinAuth in HttpClient 4.4
Date Wed, 13 Aug 2014 20:55:32 GMT
Hello,

In WindowsNegotiateScheme.getToken(), would it be possible to change
Sspi.ISC_REQ_CONNECTION to Sspi.ISC_REQ_CONNECTION |
Sspi.ISC_REQ_DELEGATE? Would it be accepted as a bug?

If you use this Wikipedia graphic as a reference,
http://en.wikipedia.org/wiki/Kerberos_(protocol)#mediaviewer/File:Kerberos.svg,
the current implementation in HttpClient 4.4alpha1 does the first
(red) and last (green) steps but it doesn't do the middle one
(middle). By adding this parameter, it won't skip out on the middle
step (where the Windows LSA will ask the Windows domain controller to
generate a ticket-granting-ticket for the requested service).

Regards,
kl

---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org


Mime
View raw message