[30127] in Kerberos
Re: SSO
daemon@ATHENA.MIT.EDU (Simon Wilkinson)
Fri Jul 18 11:43:01 2008
In-Reply-To: <ofa6l5-70c.ln1@nb2.stroeder.com>
Mime-Version: 1.0 (Apple Message framework v753)
Message-Id: <7655B7E6-8F82-4439-A800-55B30E2E63C0@sxw.org.uk>
From: Simon Wilkinson <simon@sxw.org.uk>
Date: Fri, 18 Jul 2008 16:41:17 +0100
To: =?ISO-8859-1?Q?Michael_Str=F6der?= <michael@stroeder.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
On 18 Jul 2008, at 12:13, Michael Ströder wrote:
> Is the TGT sent by the browser in the SPNEGO blob? Up to now I thought
> it's just a service ticket.
SPNEGO is a GSSAPI mechanism, wrapping the Kerberos one. If you set
the deleg_creds flag when calling into the API, then a TGT will be
included.
S.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
