Proxy authentication

[Nigel Benns]

So these features haven't made it into a release yet?
Is there an easier way to set this up without the constrained delegation?

--- On Fri, 10/2/09, Luke Howard <lukeh at padl.com> wrote:

From: Luke Howard <lukeh at padl.com>
Subject: Re: Proxy authentication
To: "Nigel Benns" <nigelbenns at rogers.com>
Cc: kerberos at mit.edu
Received: Friday, October 2, 2009, 3:49 PM

> I am using Solaris 10 for both the apache server and weblogic server.  Weblogic version is 10.1.
> We are using Windows 2003 AD for the KDC and I have given the apache server's service account delegation ability to the weblogic servers HTTP service principal.

This (the fact that you have configured a specific principal to delegate to) is constrained delegation, you'll need libgssapi_krb5/libkrb5 from trunk for this.

-- Luke