[jcifs] SPNEGO and Kerberos

[Kimberlin, Michael]

Ahh, yes...excellent.  Thanks for the direction.

It looks like quite a lot of functionality is there.  I'll have to take
some time to weed through it.  Any idea (off the top of your head)
whether these classes have PAC support?  If not, maybe I'll add that
in...

BTW...nice sig.

-michael

-----Original Message-----
From: Michael B Allen [mailto:mba2000 at ioplex.com] 
Sent: Tuesday, April 19, 2005 11:46 AM
To: Kimberlin, Michael
Cc: jcifs at samba.org
Subject: Re: [jcifs] SPNEGO and Kerberos

On Tue, 19 Apr 2005 11:10:05 -0500
"Kimberlin, Michael" <Michael.Kimberlin at savvis.net> wrote:

> >From what I recall from a previous look into this, Eric Glass had
done a
> good amount of work on implementing SPNEGO/Kerberos authentication
> against AD in a servlet filter.  What is that status of that effort?

That is basically jcifs-ext. See the link on our site.

Because the Kerberos filter doesn't really have anything to do with CIFS
it will never be integrated into mainline jCIFS. Presumably if someone
were to create a nice standalone authentication filter they might
abstract
the mechanisms such that NTLMSSP support could be provided by a third
party such as jCIFS.

Mike

-- 
IRC - where men are men, women are men, and the boys are FBI agents.