I'm trying to write a proof-of-concept application that performs Kerberos delegation. I've written all the code, and it seems to working (I'm authenticating fine), but the resulting security context doesn't have the ISC_REQ_DELEGATE flag set. So I'm thinking that maybe one of the endpoints (client or server) is forbidden to delegate. Ho...
Hi there, I am trying to compile mod_spnego (http://sourceforge.net/projects/modgssapache/) with SSPI support in Visual C++ 2008 Express Edition. I have managed to get the compiling itself work fine, but now I am stuck at some errors that the linker prints out: Linking... Creating library 2-win32-debug/mod_spnego.lib and object 2-wi...
Hi, I want to implement an SSL client using SSPI. Where can I find step-by-step guides, code examples, etc.? Thanks in advance. ...
Dear programmers! Today I have faced a serious problem, that I don't know how to approach. I'm trying to implement an authorization service, using SSPI/Kerberos. I'm testing it on my local computer. When I implement server size as a windows service application, authorization process is cycling, i.e. function InitializeSecurityContext i...
i have an asp.net web app that has this in the web.config file in the project server=[server],15001;Integrated Security=SSPI;Database=DB_NAME how do i connect to this database from Sql server mgmt studio since there is not use or password in the connection string. i am connecting from a remote machine ...
My project invoves a user connecting from client to web service, and then web service to SQL Server. The web services and SQL Server are on separate machines. Because of security requirements, we cannot used mixed mode in SQL Server, only Windows authentication. We are experiencing the "double-hop" issue between web service and SQL Serv...
I have a client-server application that needs to be secured by adding server-side authentication. The client user will already be authenticated to LDAP (Active Directory) and will be running a C# GUI. The client connects to a server on a Linux box which uses Centrify for LDAP authentication. As I understand things, the two need to neg...
Setup: Apache 2.2, mod_auth_sspi 1.0.3/1.0.4, mod_wsgi 3.3, python 2.6.2 Some background information: Whenever IE hits an URL, that requires it to perform NTLM challenge-response, further POST requests to the same domain are performed as follows: A zero-length POST (Content-Length 0) is performed The server replies with 401. WWW-Authe...