Kerberos: The Definitive Guide now available

JK Jaganathan karthikj at windows.microsoft.com
Thu Aug 21 17:59:24 EDT 2003


 
Here is the link to the MSDN sample 
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsecur
e/html/http-sso-1.asp
You can find this by searching the MSDN site for SPNEGO.
Also another open source apache module that uses the above code
http://modgssapache.sourceforge.net/

> -----Original Message-----
> From: kerberos-bounces at mit.edu 
> [mailto:kerberos-bounces at mit.edu] On Behalf Of Wyllys Ingersoll
> Sent: Thursday, August 21, 2003 11:48 AM
> To: Dick Joltes
> Cc: kerberos at mit.edu
> Subject: Re: Kerberos: The Definitive Guide now available
> 
> Dick Joltes wrote:
> > Wyllys said:
> > 
> >> Im not sure how much of the Kerberos API is considered 
> "stable" (i.e.
> >> not subject to change from revision to revision).  Writing a book 
> >> about the API as it stands today in 1.3 might be out-of-date in a 
> >> year or whenever 1.4 comes out.
> >>
> >> The API is not-standard, it is not specified by any RFC, thus its 
> >> harder to document it definitively.
> > 
> > 
> > True enough, but at least one site I've seen discriminates 
> between the
> > (unstable) internal functions and the (hopefully more 
> stable) exposed 
> > API.  The exposed stuff must be more stable since there are 
> people out 
> > there writing applications against it and using others that 
> have been 
> > around for a while.  I wouldn't attempt to document 
> internals except 
> > to say "use this at your own risk."
> > 
> >> Microsoft documented much of what you are asking about recently.
> >> I don't have a link handy, but you can search for it on 
> MSDN website 
> >> or maybe someone reading this list will post it.
> > 
> > 
> > Maybe this is the URL you're thinking of:
> > 
> > 
> http://meta.cesnet.cz/software/heimdal/draft-brezak-spnego-http-04.txt
> > 
> 
> Thats part of it, but they also published a much more 
> detailed document, complete with code samples and everything 
> needed to implement it.
> 
> > 
> > 
> > Take a look at http://negotiateauth.mozdev.org/.
> > 
> 
> Yup, seen it.  Its nice, but it does not use SPNEGO.
> 
> -Wyllys
> 
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 



More information about the Kerberos mailing list