tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Mark Thomas <>
Subject Re: Windows Authentication: Issue 49318 vs 47679
Date Tue, 29 Mar 2011 14:20:13 GMT
On 28/03/2011 22:31, Stefan Mayr wrote:
> Native SPNEGO in Tomcat sounds great. Waiting a little while depends on
> your scale of "little". Is there already some development we can follow?
> Will this use Java GSS? I never figured out how to configure this with
> Tomcat.

"little" hopefully means the next week or so in a 7.0.12 release. I have
a handful of things I need/want to get into 7.0.12 and SPNEGO is one of

Having spent more time than I want to think about and having lost count
of the number of times I re-installed Windows 2k8 server to test this, I
finally got this working a few minutes ago. The current code is *very*
rough and ready and it only does authentication, not authorisation so I
still have some work to do.

The solution is based on ideas from Spring Security's Kerberos extension
and the most recent patches attached to bug 48685.

I'll be committing an initial implementation once I have cleaned up the
code a bit and then I'll build on that to add authorisation, more
configuration etc.


To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message