GSS-API pointers

[Norbert Klasen]

--On Dienstag, 27. April 2004 09:40 +0100 Richard Gundersen 
<richardgundersen at hotmail.com> wrote:

> Sorry if this is the wrong place to ask this question - I'm having
> trouble understanding how to use GSS-API to make my web applications
> secure via Kerberos

see 
<http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnsecure/html/http-sso-1.asp> 
for a description of HTTP Negotiate.

> For example, if I'm using Tomcat as my app server, would there be a
> GSS-API module (something like mod_ssl for Apache??) that sits in front
> of all network traffic, and only allows traffic through once mutual
> authentication has taken place?

Wedgetail offers a package to support HTTP Negotiate with various J2EE 
servers. <http://www.wedgetail.com/jcsi/sso/index.html>

Norbert