Exchange server authentication

Andrew Bartlett abartlet at samba.org
Sun Aug 28 18:24:44 EDT 2005


On Thu, 2005-08-25 at 13:57 -0700, Devon Hubbard wrote:
> Hello.  I¹m a first time poster to the list and I apologize if this
> information is available elsewhere, but I was wondering if anyone has any
> sample code that uses Kerberos to authenticate to an Exchange server?  I¹m
> specifically trying to do this from an OS X client.  

Which program in particular?

> I¹m poking around in
> tcpdump data and I can¹t determine if I¹m just missing something, or if the
> Exchange test server I¹m using isn¹t properly identifying that it can
> provide Kerberos authentication.

The mechanisms you need to look for are GSS-SPNEGO for SASL and
'Negotiate' for HTTP.  This is what Microsoft uses to choose between
NTLMSSP and Kerberos.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20050829/c685ea35/attachment.bin


More information about the krbdev mailing list