Uploaded image for project: 'HttpComponents HttpClient'
  1. HttpComponents HttpClient
  2. HTTPCLIENT-1540

Support delegated credentials (ISC_REQ_DELEGATE) via ClientWinAuth

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 4.4 Alpha1
    • 4.4 Beta1
    • HttpClient (classic)
    • None
    • Windows

    Description

      If you use this Wikipedia graphic as a reference, http://en.wikipedia.org/wiki/Kerberos_(protocol)#mediaviewer/File:Kerberos.svg, the current implementation in HttpClient 4.4alpha1 does the first (red) and last (green) steps but it doesn't do the middle one (middle). By adding a parameter, it won't skip out on the middle step (where the Windows LSA will ask the Windows domain controller to generate a ticket-granting-ticket for the requested service).

      In WindowsNegotiateScheme.getToken(), the change would be to update Sspi.ISC_REQ_CONNECTION to Sspi.ISC_REQ_CONNECTION | Sspi.ISC_REQ_DELEGATE.

      Attachments

        1. HTTPCLIENT-1540.patch.diff
          0.8 kB
          Ka-Lok Fung

        Activity

          People

            Unassigned Unassigned
            kfung Ka-Lok Fung
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: