Re: Kerberos authentication in HTTP

[Daniel Kouril <kouril@ics.muni.cz>]

On Sat, Aug 17, 2002 at 12:33:12PM +1000, Luke Howard wrote:
> 
> >We have implemented the Negotiate authentication scheme defined by draft
> >'draft-brezak-spnego-http-03.txt', which is used by Microsoft's www
> >components. The method is based on using of SPNEGO and GSS-API.  Our
> >implementation is intended for the Apache http server and Mozilla browser. 
> >More information is avaible on the mentioned page.
> 
> This doesn't include a SPNEGO implementation though, right? We need one,
> I'm looking at writing one. (Does anyone know where spnego.asn1 got
> to?)

No it doesn't. But the implemention is written by means of GSS API so I
suppose when SPNEGO is available it should be very easy to switch it to use
of SPNEGO. However we're not working on implementation of SPNEGO.

--
Dan