You are viewing a plain text version of this content. The canonical link for it is here.
Posted to kerby@directory.apache.org by Marc Boorshtein <mb...@gmail.com> on 2015/10/26 21:56:00 UTC

S4u2self and s4u2proxy?

Does the kerby client support s4u2self and s4u2proxy?

Thanks
Marc

RE: S4u2self and s4u2proxy?

Posted by "Zheng, Kai" <ka...@intel.com>.
Marc,

No problem at all. I'm interested in the support and would be very glad to help if you have any question. Thanks!

Regards,
Kai

-----Original Message-----
From: Marc Boorshtein [mailto:mboorshtein@gmail.com] 
Sent: Thursday, November 12, 2015 9:35 PM
To: kerby@directory.apache.org
Subject: Re: S4u2self and s4u2proxy?

Kai,

Sorry for the delay.  Yes, will do.  Also, I'm going to try to take a first crack at it.  I've got my development environment setup.

Thanks

On Tue, Oct 27, 2015 at 5:05 PM, Zheng, Kai <ka...@intel.com> wrote:

> Marc,
>
> Maybe you could contribute a request JIRA to support the MS extension 
> with the desired controls you'd like to have? It would be good for the 
> community to consider, thanks.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Marc Boorshtein [mailto:mboorshtein@gmail.com]
> Sent: Tuesday, October 27, 2015 11:53 PM
> To: kerby@directory.apache.org
> Subject: Re: S4u2self and s4u2proxy?
>
> Thanks Kai.  Working with the jdk8 stuff now, but thought it would be 
> good to have some more control over the process since the jdk 8 
> support is in the com.sun packages.
>
>
>
> On Mon, Oct 26, 2015 at 7:48 PM, Zheng, Kai <ka...@intel.com> wrote:
>
> > Hi Marc,
> >
> > Kerby doesn't support the MS extension yet. It's not scheduled due 
> > to limited resources. In near term we're focusing on the support of 
> > PKINIT and TokenPreauth, which may solve some use cases enabled by 
> > s4u
> flows.
> >
> > JDK8 had already supported the MS extension, maybe you could try it? 
> > A shortcut for Kerby to support it is to leverage the JDK support.
> >
> > Regards,
> > Kai
> >
> > -----Original Message-----
> > From: Marc Boorshtein [mailto:mboorshtein@gmail.com]
> > Sent: Tuesday, October 27, 2015 4:56 AM
> > To: kerby@directory.apache.org
> > Subject: S4u2self and s4u2proxy?
> >
> > Does the kerby client support s4u2self and s4u2proxy?
> >
> > Thanks
> > Marc
> >
>

Re: S4u2self and s4u2proxy?

Posted by Marc Boorshtein <mb...@gmail.com>.
Kai,

Sorry for the delay.  Yes, will do.  Also, I'm going to try to take a first
crack at it.  I've got my development environment setup.

Thanks

On Tue, Oct 27, 2015 at 5:05 PM, Zheng, Kai <ka...@intel.com> wrote:

> Marc,
>
> Maybe you could contribute a request JIRA to support the MS extension with
> the desired controls you'd like to have? It would be good for the community
> to consider, thanks.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Marc Boorshtein [mailto:mboorshtein@gmail.com]
> Sent: Tuesday, October 27, 2015 11:53 PM
> To: kerby@directory.apache.org
> Subject: Re: S4u2self and s4u2proxy?
>
> Thanks Kai.  Working with the jdk8 stuff now, but thought it would be good
> to have some more control over the process since the jdk 8 support is in
> the com.sun packages.
>
>
>
> On Mon, Oct 26, 2015 at 7:48 PM, Zheng, Kai <ka...@intel.com> wrote:
>
> > Hi Marc,
> >
> > Kerby doesn't support the MS extension yet. It's not scheduled due to
> > limited resources. In near term we're focusing on the support of
> > PKINIT and TokenPreauth, which may solve some use cases enabled by s4u
> flows.
> >
> > JDK8 had already supported the MS extension, maybe you could try it? A
> > shortcut for Kerby to support it is to leverage the JDK support.
> >
> > Regards,
> > Kai
> >
> > -----Original Message-----
> > From: Marc Boorshtein [mailto:mboorshtein@gmail.com]
> > Sent: Tuesday, October 27, 2015 4:56 AM
> > To: kerby@directory.apache.org
> > Subject: S4u2self and s4u2proxy?
> >
> > Does the kerby client support s4u2self and s4u2proxy?
> >
> > Thanks
> > Marc
> >
>

RE: S4u2self and s4u2proxy?

Posted by "Zheng, Kai" <ka...@intel.com>.
Marc,

Maybe you could contribute a request JIRA to support the MS extension with the desired controls you'd like to have? It would be good for the community to consider, thanks.

Regards,
Kai

-----Original Message-----
From: Marc Boorshtein [mailto:mboorshtein@gmail.com] 
Sent: Tuesday, October 27, 2015 11:53 PM
To: kerby@directory.apache.org
Subject: Re: S4u2self and s4u2proxy?

Thanks Kai.  Working with the jdk8 stuff now, but thought it would be good to have some more control over the process since the jdk 8 support is in the com.sun packages.



On Mon, Oct 26, 2015 at 7:48 PM, Zheng, Kai <ka...@intel.com> wrote:

> Hi Marc,
>
> Kerby doesn't support the MS extension yet. It's not scheduled due to 
> limited resources. In near term we're focusing on the support of 
> PKINIT and TokenPreauth, which may solve some use cases enabled by s4u flows.
>
> JDK8 had already supported the MS extension, maybe you could try it? A 
> shortcut for Kerby to support it is to leverage the JDK support.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Marc Boorshtein [mailto:mboorshtein@gmail.com]
> Sent: Tuesday, October 27, 2015 4:56 AM
> To: kerby@directory.apache.org
> Subject: S4u2self and s4u2proxy?
>
> Does the kerby client support s4u2self and s4u2proxy?
>
> Thanks
> Marc
>

Re: S4u2self and s4u2proxy?

Posted by Marc Boorshtein <mb...@gmail.com>.
Thanks Kai.  Working with the jdk8 stuff now, but thought it would be good
to have some more control over the process since the jdk 8 support is in
the com.sun packages.



On Mon, Oct 26, 2015 at 7:48 PM, Zheng, Kai <ka...@intel.com> wrote:

> Hi Marc,
>
> Kerby doesn't support the MS extension yet. It's not scheduled due to
> limited resources. In near term we're focusing on the support of PKINIT and
> TokenPreauth, which may solve some use cases enabled by s4u flows.
>
> JDK8 had already supported the MS extension, maybe you could try it? A
> shortcut for Kerby to support it is to leverage the JDK support.
>
> Regards,
> Kai
>
> -----Original Message-----
> From: Marc Boorshtein [mailto:mboorshtein@gmail.com]
> Sent: Tuesday, October 27, 2015 4:56 AM
> To: kerby@directory.apache.org
> Subject: S4u2self and s4u2proxy?
>
> Does the kerby client support s4u2self and s4u2proxy?
>
> Thanks
> Marc
>

RE: S4u2self and s4u2proxy?

Posted by "Zheng, Kai" <ka...@intel.com>.
Hi Marc,

Kerby doesn't support the MS extension yet. It's not scheduled due to limited resources. In near term we're focusing on the support of PKINIT and TokenPreauth, which may solve some use cases enabled by s4u flows. 

JDK8 had already supported the MS extension, maybe you could try it? A shortcut for Kerby to support it is to leverage the JDK support.

Regards,
Kai

-----Original Message-----
From: Marc Boorshtein [mailto:mboorshtein@gmail.com] 
Sent: Tuesday, October 27, 2015 4:56 AM
To: kerby@directory.apache.org
Subject: S4u2self and s4u2proxy?

Does the kerby client support s4u2self and s4u2proxy?

Thanks
Marc