[jcifs] jCIFS and SPNEGO - how?

[John.Baker at barclayscapital.com]

Matt,

I hadn't looked at the Kerberos branch, but I assumed there would be a filter so you could chain them (or something similar). 

Search back in the list for my bug report on the NtlmHttpFilter in 1.3.x and the inability to safely use web.xml parameters (or at all, if you set the log level, if I recall).


John 

> -----Original Message-----
> From: 
> jcifs-bounces+john.baker=barclayscapital.com at lists.samba.org 
> [mailto:jcifs-bounces+john.baker=barclayscapital.com at lists.sam
> ba.org] On Behalf Of Matthias Keller
> Sent: 20 January 2009 16:21
> To: jcifs at lists.samba.org
> Subject: Re: [jcifs] jCIFS and SPNEGO - how?
> 
> Hi John
> 
> Yes there is a kerberos-version, but I don't see where I 
> would enable SPNEGO there - I find no reference about that 
> and don't see any 'Negot iate' strings in the sources.... ?!
> the NtlmHttpFilter.java only checks for NTLM and basic auth
> 
> Or am I overlooking something?
> 
> Thanks for a pointer in the right direction.
> 
> btw, what's wrong with NtlmFilter ?
> 
> Thanks
> 
> Matt
> 
> John.Baker at barclayscapital.com wrote:
> > Wasn't there a recent patched version of jcifs1.3.x released with 
> > Kerberos?  Your only issue there is the broken NtlmFilter, but you 
> > could always fix it..
> >
> >     
> --------------------------------------------------------------
> ----------
> >     *From:*
> >     jcifs-bounces+john.baker=barclayscapital.com at lists.samba.org
> >     
> [mailto:jcifs-bounces+john.baker=barclayscapital.com at lists.samba.org]
> >     *On Behalf Of *Asaf Mesika
> >     *Sent:* 20 January 2009 14:19
> >     *To:* Matthias Keller
> >     *Cc:* jcifs at lists.samba.org
> >     *Subject:* Re: [jcifs] jCIFS and SPNEGO - how?
> >
> >     I couldn't get SPNEGO to work in jcifs, but that was a year ago.
> >     Instead, I found an open source project hosted by 
> TagLab company.
> >     Today I can't find any references to it on their site, from some
> >     reason. I can give you the jars I have.
> >
> >
> >     On Tue, Jan 20, 2009 at 3:41 PM, Matthias Keller
> >     <matthias.keller at ergon.ch> wrote:
> >
> >         Hi
> >
> >         I'm looking for a SPNEGO implementation and stumbled over
> >         jcifs. At the bottom of the homepage it says
> >
> >             The stock jcifs-1.2.13 package has been patched 
> by a third
> >             party to support Kerberos 5 / SPNEGO extended security
> >             authentication.
> >
> >         but I can't really find any clue as of where and 
> how to enable
> >         SPNEGO in the filter/servlet provided in the demos?
> >
> >         Or do I have to use the (4 year old) jcifs-ext 
> library for this?
> >
> >         Thanks for a pointer in the right direction!
> >
> >         Matt
> >
> >
> > _______________________________________________
> >
> >  
> >
> > This e-mail may contain information that is confidential, 
> privileged 
> > or otherwise protected from disclosure. If you are not an intended 
> > recipient of this e-mail, do not duplicate or redistribute 
> it by any 
> > means. Please delete it and any attachments and notify the 
> sender that 
> > you have received it in error. Unless specifically indicated, this 
> > e-mail is not an offer to buy or sell or a solicitation to 
> buy or sell 
> > any securities, investment products or other financial product or 
> > service, an official confirmation of any transaction, or an 
> official 
> > statement of Barclays. Any views or opinions presented are solely 
> > those of the author and do not necessarily represent those of 
> > Barclays. This e-mail is subject to terms available at the following
> > link: www.barcap.com/emaildisclaimer
> > <http://www.barcap.com/emaildisclaimer>. By messaging with Barclays 
> > you consent to the foregoing.  Barclays Capital is the investment 
> > banking division of Barclays Bank PLC, a company registered 
> in England 
> > (number 1026167) with its registered office at 1 Churchill Place, 
> > London, E14 5HP.  This email may relate to or be sent from other 
> > members of the Barclays Group.//
> >
> > _______________________________________________
> >
> 
> 
> --
> matthias.keller at ergon.ch  +41 44 268 83 98 Ergon Informatik 
> AG, Kleinstrasse 15, CH-8008 Zürich http://www.ergon.ch 
> ______________________________________________________________
> e r g o n    smart people - smart software
> 
> 
> 
_______________________________________________

This e-mail may contain information that is confidential, privileged or otherwise protected from disclosure. If you are not an intended recipient of this e-mail, do not duplicate or redistribute it by any means. Please delete it and any attachments and notify the sender that you have received it in error. Unless specifically indicated, this e-mail is not an offer to buy or sell or a solicitation to buy or sell any securities, investment products or other financial product or service, an official confirmation of any transaction, or an official statement of Barclays. Any views or opinions presented are solely those of the author and do not necessarily represent those of Barclays. This e-mail is subject to terms available at the following link: www.barcap.com/emaildisclaimer. By messaging with Barclays you consent to the foregoing.  Barclays Capital is the investment banking division of Barclays Bank PLC, a company registered in England (number 1026167) with its registered office at 1 Churchill Place, London, E14 5HP.  This email may relate to or be sent from other members of the Barclays Group.
_______________________________________________