[19047] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Web auth

daemon@ATHENA.MIT.EDU (Joey Collins)
Fri Apr 11 21:26:27 2003

Message-ID: <3E976AF3.4A4643AE@charter.net>
Date: Fri, 11 Apr 2003 21:25:07 -0400
From: Joey Collins <joeycollins@charter.net>
MIME-Version: 1.0
To: Sebastian Konstanty Zdrojewski <s.zdrojewski@neticon.it>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

If you want to keep it simple, you can use kinit to get a
ticket-granting-ticket.  using kinit, you need to supply a username and
password, this gets packaged up in a KRB5 AP-REQ message to the domain
controller.  kinit returns success if the username/password pair are
valid, otherwise, authentication failure.  This scheme is predicated on
the assumption you have the plaintext username and password, perhaps
gathered over an ssl connection(https).


Joey.

Sebastian Konstanty Zdrojewski wrote:
> 
> Hello,
> 
> I am new to this mailing list, so please excuse me if I am saying
> something stupid.
> 
> I am working on an authentication system for a web application using the
> Windows NT5 domain controller authentication database. Does anybody
> already worked on this and can give me a suggestion?
> 
> Thanks in advance,
> --
> 
> Sebastian Konstanty Zdrojewski
> IT Analyst
> 
> Neticon S.r.l.
> via Valtellina, 16 - 20159 Milano
> Tel. +39 02 68.80.731
> FAX +39 02.60.85.70.41
> Cell. +39 349.33.04.311
> ICQ # 97334916
> ----------------------------------------------
> Web: http://www.neticon.it/
> E-mail: s.zdrojewski@neticon.it
> 
> ________________________________________________
> Kerberos mailing list           Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post