Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Message-ID: <4D922E6D.4000602@apache.org>
Date: Tue, 29 Mar 2011 20:09:33 +0100
From: Mark Thomas <markt@apache.org>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-GB;
 rv:1.9.2.15) Gecko/20110303 Thunderbird/3.1.9
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Windows Authentication: Issue 49318 vs 47679
References: <4D8F8172.8040303@mayr-stefan.de>
 <AANLkTimLmRL13V_e52XkCw+_-J1GXXA6vM+RWp5QSm0j@mail.gmail.com>
 <4D904BB6.6020507@apache.org> <4D90FE28.80406@mayr-stefan.de>
 <4D91EA9D.5060204@apache.org>
In-Reply-To: <4D91EA9D.5060204@apache.org>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

On 29/03/2011 15:20, Mark Thomas wrote:
> On 28/03/2011 22:31, Stefan Mayr wrote:
>> Native SPNEGO in Tomcat sounds great. Waiting a little while depends on
>> your scale of "little". Is there already some development we can follow?
>> Will this use Java GSS? I never figured out how to configure this with
>> Tomcat.
> 
> "little" hopefully means the next week or so in a 7.0.12 release. I have
> a handful of things I need/want to get into 7.0.12 and SPNEGO is one of
> them.
> 
> Having spent more time than I want to think about and having lost count
> of the number of times I re-installed Windows 2k8 server to test this, I
> finally got this working a few minutes ago. The current code is *very*
> rough and ready and it only does authentication, not authorisation so I
> still have some work to do.
> 
> The solution is based on ideas from Spring Security's Kerberos extension
> and the most recent patches attached to bug 48685.
> 
> I'll be committing an initial implementation once I have cleaned up the
> code a bit and then I'll build on that to add authorisation, more
> configuration etc.

The first part just got committed [1]. More to follow over the next day
or so.

Mark

[1] http://svn.apache.org/viewvc?rev=1086683&view=rev

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org