regarding kerberos for different plateforms

[Fred Dushin]

There are specification that allow you to integrate Kerberos with  
standards-based communications protocols.  For example, the OMG  
SECIOP specification is an extension to IIOP, which allows you to  
negotiate a secure IIOP channel between CORBA endpoints.

I know of only one vendor (Adiron) that supports this specification,  
and it is Java-only.

Another potential specification is the WS-SecureConversation  
specification, which is now being ratified by Oasis.  I do not know  
if any vendors support full Kerberos integration.  Microsoft may, but  
it's generally going to be a WCF-only kind of thing, and you're tied  
down to SOAP, for that.

Anyone know of any others?

Not sure if this is of any help to you.  If you're locked into using  
a communications protocol that does not support integration with the  
GSS-API, you may need to do your session negotiation "out of band".   
It's messy, but sometimes that's your only option.

Does anyone know if there has been any work to hook the GSS-API into  
the SSL handshake?  SSL seems fairly public-key oriented, but maybe  
there's an avenue there?

Or, perhaps a tunnel through SSH?  I've never used kerberos and ssh  
before.  Maybe someone here has.  (Has obvious limitations, e.g., if  
you have a lot of ports you need to tunnel, and if any of them carry  
references to other ports, so it would probably only work in the  
simplest scenarios)

-Fred

On Sep 17, 2007, at 4:38 AM, sharda saiwan wrote:

> Hello all,
>
> I have an application, in which client is running in C++ and server is
> running in java plateform.
>
> Now I want to make the peers authenticated and the communication  
> channels
> encrypted using Kerberos.
>
> Is it possible?
>
> Although Kerberos authentication mechanismis available in C++ as  
> well as in
> Java (e.g. GSS-API), BUT the problem is that there is a seperate  
> set of send
> and receive commands for sending and receiving security context for  
> C++ and
> Java. So I can not send the security context or credentials from one
> plateform (say C++) and receive it on another plateform (say Java).
>
> So, the question is, how to integrate Kerberos between c++ and Java?
>
> Is it possible or not?
> Is there any other method to solve the same?
>
> Please Help!!!!!!!!!!!!!
>
> regards
> --sharda
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>