You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "Oleg Kalnichevski (Resolved) (JIRA)" <ji...@apache.org> on 2012/01/19 13:39:40 UTC
[jira] [Resolved] (HTTPCLIENT-1156) Kerberos Authentication Scheme
[ https://issues.apache.org/jira/browse/HTTPCLIENT-1156?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Oleg Kalnichevski resolved HTTPCLIENT-1156.
-------------------------------------------
Resolution: Fixed
Paulo, I refactored NegotiateScheme into separate SPNegoScheme and KerberosScheme implementations and deprecated NegotiateScheme. Please re-test your application against the latest SVN snapshot.
Oleg
> Kerberos Authentication Scheme
> ------------------------------
>
> Key: HTTPCLIENT-1156
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1156
> Project: HttpComponents HttpClient
> Issue Type: Improvement
> Components: HttpClient
> Affects Versions: 4.1.2
> Environment: Microsoft IIS
> Reporter: Paulo Rodrigues
> Priority: Minor
> Fix For: 4.2 Alpha2
>
> Attachments: KerberosScheme.java, KerberosSchemeFactory.java, TestSPENGO.java
>
> Original Estimate: 1h
> Remaining Estimate: 1h
>
> HttpClient 4.1.2 has a SPNEGO authentication that uses the Negotiate keyword. But the MS IIS that I must connect to does not send back an WWW-Authenticate: Negotiate, but, instead, does send an WWW-Authenticate: Kerberos
> So I used the NegotiateScheme.java and NegotiateSchemeFactory.java as a base to create a "new" scheme, called, KerberosScheme.java and KerberosSchemeFactory.java to make it work.
> Essentially I replaced every "Negotiate" scheme by "Kerberos", in the KerberosScheme.java, and removed the part of the code that tried, first, SPNEGO_OID, using KERBEROS_OID directly, instead.
> It works fine for me, but took me a while to figure this out.
> That why I think it could come on the new versions.
> I'll attach my version but it has no package - it was made only for a test project. It's trivial to put it in the right place/package.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org