You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "Oleg Kalnichevski (JIRA)" <ji...@apache.org> on 2014/08/21 14:03:11 UTC
[jira] [Resolved] (HTTPCLIENT-1541) Use correct service principle
name (HTTP/hostname) for WinHttpClients
[ https://issues.apache.org/jira/browse/HTTPCLIENT-1541?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Oleg Kalnichevski resolved HTTPCLIENT-1541.
-------------------------------------------
Resolution: Fixed
Patch committed to SVN trunk with some minor changes (mainly exception handling). Please review / re-test. Many thanks for this contribution, Ka-Lok.
Oleg
> Use correct service principle name (HTTP/hostname) for WinHttpClients
> ---------------------------------------------------------------------
>
> Key: HTTPCLIENT-1541
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1541
> Project: HttpComponents HttpClient
> Issue Type: Bug
> Components: HttpAuth
> Affects Versions: 4.4 Alpha1
> Environment: Windows
> Reporter: Ka-Lok Fung
> Fix For: 4.4 Final
>
> Attachments: HTTPCLIENT-1541.patch.diff, HTTPCLIENT-1541.patch.v1.1.diff
>
>
> If we use {{WinHttpClients}} as is, HTTP Negotiate authentication won't work because the ticket being generated always uses 'null' as the service principle name (SPN).
> According to the informational [RFC 4559|http://www.rfc-editor.org/rfc/rfc4559.txt], the service principle name (SPN) should be in the following form: {{HTTP/hostname}}.
> Users can work around it ourselves if we did something similar to http://stackoverflow.com/a/22865583 but it would be great if the sample code works out of the box :-)
--
This message was sent by Atlassian JIRA
(v6.2#6252)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org