Re: SPNEGO questions

Hi Andrew,

At 14.35 09/10/2005, Andrew Bartlett wrote:

>On Sun, 2005-10-09 at 11:27 +0200, Serassio Guido wrote:
> > Hi Henrik,
> >
> > I'm trying to test SPNEGO on native Windows, but I have still some
> > open questions:
> >
> > - In the response message ' NA blob message', what should be the
> blob content ?
>
>The last leg from client to server is an SPNEGO reject token in this
>case, and should be supplied to you by SSPI.

Thanks for the info. Microsoft documentation is not so clear on
Negotiate protocol, even if they recommend to use it instead of use
explicitly NTLM or Kerberos .... :-(

> > - What client to use for testing it ? I have tried to play with the
> > network.negotiate-auth options of Firefox and Mozilla, but
> without any result.
>
>That's what I've used in the past. I think I made it work... You need
>the 1.5 betas for HTTP proxy stuff.

Yes, I can confirm that Firefox 1.5 beta 2 accepts Negotiate
authentication requests.

Andrew: another question:

Samba 3.0.14a provided with Debian Sarge is enough to test Negotiate,
or I need to install 3.0.20a ?

I like to have a working baseline on Linux before to work on a native
Windows Negotiate Helper.

Regards

Guido

-
========================================================
Guido Serassio
Acme Consulting S.r.l. - Microsoft Certified Partner
Via Lucia Savarino, 1 10098 - Rivoli (TO) - ITALY
Tel. : +39.011.9530135 Fax. : +39.011.9781115
Email: guido.serassio@acmeconsulting.it
WWW: http://www.acmeconsulting.it/
Received on Sun Oct 09 2005 - 07:56:48 MDT