kerberos for Microsoft IIS/any http server?

Daniel Kouril kouril at ics.muni.cz
Wed Dec 3 08:55:36 EST 2003


Wyllys Ingersoll wrote:
> Check out http://negotiateauth.mozdev.org
> This guy has an extension for mozilla for supporting
> Microsoft's Negotiate mechanism.  However, his version
> currently only supports Heimdal's Kerberos/GSSAPI.
> This site also has links to Apache plugins which support
> the IIS negotiate method.
> 
> Also take a look at
> http://bugzilla.mozilla.org/show_bug.cgi?id=17578
> 
> I posted a more generalized patch for Mozilla which *should*
> be able to compile with Heimdal, MIT, or Solaris Kerberos
> implementations.  It likely will not appear in Mozilla
> until release 1.7, though.  In the meantime, extensions for
> Mozilla 1.5 (and 1.6) should start appearing sometime
> in the near future.
> 
> You don't mention what browser you are using or 
> what OS platform you are using.

Sorry for somewhat late reply, I have a few comments. The negotiateauth 
extension should compile with MIT as well, however, I haven't tryied 
yet. The page mentioned above contains a link to a compiled version of 
the extension built on Linux/i386, which can be easily installed to your 
Mozilla-based browser (and even if the authentication framework in 
Mozilla still requires some work -- see discussion at 
http://bugzilla.mozilla.org/show_bug.cgi?id=17578 -- the extension works 
on Mozilla 1.5, 1.6a)

--
Daniel



More information about the Kerberos mailing list