Re: [jetty-dev] Jetty SPNEGO not supported for localhost, how to know th

[Jesse McConnell <jesse.mcconnell@xxxxxxxxx>]

I don't know of a way for SPNEGO to help you out here, it is pretty clear in its limitations, at least when I looked last.  This might be more of a Windows question since it is hard to guarantee something like that.  I suspect you are looking at a custom authenticator/login mechanism leveraging AD or something, perhaps the LdapAuthenticator would give you what you need but it isn't going to give you transparent authn like I think you are shooting for.

cheers,

Jesse

--
jesse mcconnell
jesse.mcconnell@xxxxxxxxx

On Wed, Nov 16, 2016 at 6:01 AM, Houtman, Roland <Roland.Houtman@xxxxxxxxxxxxxxx> wrote:

Dear Jetty-dev,

 

We’re using Jetty 9.0.3 and set it up for spnego.

The client application is a .NET plugin in Excel.

 

We require spnego being performed on the localhost as well, because then we can safely obtain the desktop username from the servletRequest.

Since spnego is not supported for localhost(afaik), how then can we guarantee the provided username is authentic?

 

Kind regards,

Roland

 

_______________________________________________
jetty-dev mailing list
jetty-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/jetty-dev