Re: [Perlgssapi-users] SSO on Windows

[<sam...@ba...>]

Hi Achim,

Thanks for the quick response.

Does this mean that it's not possible via GSSAPI & KfW?

Yes, please forward the patches, I will give them a try. Direct integration with SSPI would be wonderful!

Thanks,
Sam

-----Original Message-----
From: Achim Grolms [mailto:ac...@gr...] 
Sent: Thursday, November 29, 2012 9:19 PM
To: per...@li...; Ferencik, Samuel: Markets (PRG)
Subject: Re: [Perlgssapi-users] SSO on Windows

Hi Sam,

As far as I know it is possible.
I've patches in my inbox that modify LWP::Authen::Negotiate to make
direct  use of the SSPI-API, but I still have integrated the patches.

Please let me know If you want me to forward the patches to you,
you can give it a try on your own.

Sorry.

Best Regards,
Achim

On Thursday 29 November 2012, sam...@ba... wrote:
> Hi,
>
> Is it possible for LWP::Authen::Negotiate / GSSAPI to use the Windows
> credentials cache transparently?
>
> We have a Perl application making HTTP requests to an intranet web server
> (IIS). We need the app to authenticate with the server, but we don't want
> to
>
> -          (store and) send the password
>
> -          run kinit interactively.
>
> The reason is that the application runs non-interactively (as a Windows
> service), so any need to enter a password even once would defeat the
> purpose.
>
> I've installed MIT KfW, and got the GSSAPI unit tests pass, but I think
> there's more to it than that (setting up krb5.ini, perhaps running
> kinit.exe) and I'm not even sure this all will achieve what I need...
>
> Please advise.
>
> Thanks,
> Sam

_______________________________________________

This e-mail may contain information that is confidential, privileged or otherwise protected from 
disclosure. If you are not an intended recipient of this e-mail, do not duplicate or redistribute 
it by any means. Please delete it and any attachments and notify the sender that you have received 
it in error. Unless specifically indicated, this e-mail is not an offer to buy or sell or a 
solicitation to buy or sell any securities, investment products or other financial product or 
service, an official confirmation of any transaction, or an official statement of Barclays. Any 
views or opinions presented are solely those of the author and do not necessarily represent those 
of Barclays. This e-mail is subject to terms available at the following link: www.barclays.com/emaildisclaimer. 
By messaging with Barclays you consent to the foregoing.  Barclays offers premier investment banking 
products and services to its clients through Barclays Bank PLC, a company registered in England 
(number 1026167) with its registered office at 1 Churchill Place, London, E14 5HP.  This email may 
relate to or be sent from other members of the Barclays Group.

_______________________________________________