Help Needed

[Frank Balluffi]

Wyllys,

Like GSS-API, SSPI is a call-level interface. Microsoft uses http://search.ietf.org/internet-drafts/draft-brezak-spnego-http-03.txt to pass GSS-API tokens between IE and IIS. Also see http://www.microsoft.com/windows2000/docs/kerberos.doc. So draft-brezak-spnego-http-03.txt could be used to pass tokens between an SSPI-based Windows 2000 client and a GSS-API-based UNIX service.

Frank



---------------------------------------- Message History ----------------------------------------


From:  Wyllys Ingersoll <wyllys.ingersoll at sun.com>@mit.edu on 06/13/2002 09:30 AM AST

DELEGATED - Sent by:    krbdev-admin at mit.edu


To:    Nitin Gupta <nitin at julysystems.com>
cc:    krbdev at mit.edu
Subject:    Re: Help Needed



The Microsoft "on-the-wire" equivalent to GSSAPI is called SSPI and you
can write
code using that API to talk to GSSAPI apps on the Unix side.  Not sure
where to find
the SSPI docs in WinXP, though, I'm sure someone with better WinXP knowledge
than I can assist you there.

-Wyllys


Nitin Gupta wrote:
> Hi,
>
>
>
> I have a SEAM KDC (on Sun-Solaris) and Window XP client to that KDC. I
> am able to configure and KDC successfully authenticates the user on the
> Windows XP and gives the tickets. I want to do this login authentication
> through programming. I get to know one can use GSSAPI?s for the same.
> But I am not able to start with how to use GSSAPIs to get authenticated.
> How to start the coding? How can I get all the .h and .dll (if any) to
> do the same? Does it involve implementing the interface itself?
>
>
>
> I am not sure if this is the right place to ask such a doubt. If it is
> not the right place can somebody please tell me where to ask such question.
>
>
>
> Any thing in this regard will be very helpful.
>
>
>
> Regards
>
> Nitin
>



_______________________________________________
krbdev mailing list             krbdev at mit.edu
http://mailman.mit.edu/mailman/listinfo/krbdev



--

This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.