Re: Krb5 native and JGSS messages

2006-09-02 Thread Fredrik Tolf
On Tue, 2006-08-22 at 13:54 +, Jeffrey Altman wrote: > In other words, you need to either use raw Kerberos 5 on both peers or > GSS on both peers in order for it to work. I see. Would that mean that there is no way at all to authenticate to an existing krsh server from a Java client applicatio

Re: Krb5 native and JGSS messages

2006-08-22 Thread Jeffrey Altman
Fredrik Tolf wrote: > Sorry, I guess I should rephrase myself. I didn't mean to ask whether > JGSS is compatible with MIT's, Heimdal's and Microsoft's GSSAPI > implementation (because I would find it very weird if it wasn't), but > rather whether the messages generated by GSSAPI (whether it be JGS

Re: Krb5 native and JGSS messages

2006-08-21 Thread Michael B Allen
On Tue, 22 Aug 2006 03:25:42 +0200 Fredrik Tolf <[EMAIL PROTECTED]> wrote: > On Mon, 2006-08-21 at 18:29 -0400, Michael B Allen wrote: > > On Mon, 21 Aug 2006 21:48:30 +0200 > > Fredrik Tolf <[EMAIL PROTECTED]> wrote: > > > > > So, I'm wondering, are the messages created by JGSS compatible with t

Re: Krb5 native and JGSS messages

2006-08-21 Thread Fredrik Tolf
On Mon, 2006-08-21 at 18:29 -0400, Michael B Allen wrote: > On Mon, 21 Aug 2006 21:48:30 +0200 > Fredrik Tolf <[EMAIL PROTECTED]> wrote: > > > So, I'm wondering, are the messages created by JGSS compatible with the > > ones used by the native MIT API? > > Yes. There have been bugs in Java's Kerbe

Re: Krb5 native and JGSS messages

2006-08-21 Thread Seema Malkani
To clarify, Java does not provide an API to interface to Kerberos directly if that's what you are looking for. You can use KFW on Windows. MIT does provide GSSAPI implementation, and Java GSS/Kerberos is fully interoperable with MIT GSS/Kerberos. Seema Seema Malkani wrote On 08/21/06 15:16,:

Re: Krb5 native and JGSS messages

2006-08-21 Thread Michael B Allen
On Mon, 21 Aug 2006 21:48:30 +0200 Fredrik Tolf <[EMAIL PROTECTED]> wrote: > So, I'm wondering, are the messages created by JGSS compatible with the > ones used by the native MIT API? Yes. There have been bugs in Java's Kerberos implementation but I'm not sure if there is anything outstanding. Ot

Re: Krb5 native and JGSS messages

2006-08-21 Thread Seema Malkani
Yes. Sun's implementation of Java GSS/Kerberos is fully interoperable with MIT GSS/Kerberos implementation. Seema Fredrik Tolf wrote On 08/21/06 12:48,: >Dear List, > >I'm intending to write a network client kind of program that's supposed >to run on Windows, so I decided it to write it in Java

Krb5 native and JGSS messages

2006-08-21 Thread Fredrik Tolf
Dear List, I'm intending to write a network client kind of program that's supposed to run on Windows, so I decided it to write it in Java, and I want it to authenticate to the server with Kerberos. The server, however, uses the native MIT krb5 APIs to "do its stuff", while the only option I know i