[Freeipa-devel] another snag with kerberos

[Andrew Bartlett]

On Mon, 2007-07-16 at 17:02 -0400, Rob Crittenden wrote:
> Found another snag in the forwarding kerberos tickets via XML-RPC: the 
> python xmlrpc library only supports Basic Authentication.
> 
> The really aggravating part is that as far as I can tell you can't 
> include extra headers to be send in the XMLRPC request, so we can't even 
> include an Authorization header ourselves.
> 
> And even if we could include our own headers I'm not sure how to 
> hand-craft a Negotiate request.

That's the easy part:  base64 encode the blob that GSSAPI gives you.  

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070717/bc2ecb13/attachment.sig>