Re: Problem with SPNEGO on Solaris 10 build 4

2008-07-21 Thread Markus Moeller
I use build 4 and in general it works fine. I have now compiled the gss-sample test client and server on Opensolaris and Solaris 10 build 4. On OpenSolaris I get: client: ./gss-client -port 11000 -mech 1.3.6.1.5.5.2 opensolaris.solaris.home HTTP test Sending init_sec_context token (size=606)..

Re: Problem with SPNEGO on Solaris 10 build 4

2008-07-21 Thread Douglas E. Engert
Markus Moeller wrote: > I tried to use my squid_kerb_auth on Solaris 10 and fail. My configure > determines it supports SPNEGO but when I use it I get > > 2008/07/20 16:11:37| squid_kerb_auth: gss_accept_sec_context() failed: No > credentials were supplied, or the credentials were unavailable

Re: SSO

2008-07-21 Thread Douglas E. Engert
Michael B Allen wrote: > On Fri, Jul 18, 2008 at 12:03 PM, Michael Ströder <[EMAIL PROTECTED]> wrote: >> Simon Wilkinson wrote: >>> On 18 Jul 2008, at 12:13, Michael Ströder wrote: Is the TGT sent by the browser in the SPNEGO blob? Up to now I thought it's just a service ticket. >>> SPN

Re: SSO

2008-07-21 Thread Michael Ströder
Michael B Allen wrote: > > It's the client's responsibility to decide whether or not to include a > TGT. A client can always request a forwardable TGT in which case it > can be submitted to the web server. For example on Linux if you do > kinit -f [EMAIL PROTECTED] and then point Firefox at an SPN

issue with mod_spnego

2008-07-21 Thread amit pawar
HI All, I am trying to use mod_spnego on Apache server (windows). Whenever I try to login from client from IE, it asks me for username and password. When I enter correct username and password, the Apache server crashes (child process crashes while server keeps on running). When I enter wrong passwo