[jboss-jira] [JBoss JIRA] (SECURITY-356) Log a meaningful error when browser uses Kerberos5 GSSAPI and not SPNEGO

Tue Jul 24 08:24:06 EDT 2012

     [ https://issues.jboss.org/browse/SECURITY-356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse resolved SECURITY-356.
---------------------------------------

      Assignee: Darran Lofthouse
    Resolution: Out of Date

Adding support for Kerberos5 messages as some clients e.g. Chrome use these.

> Log a meaningful error when browser uses Kerberos5 GSSAPI and not SPNEGO
> ------------------------------------------------------------------------
>
>                 Key: SECURITY-356
>                 URL: https://issues.jboss.org/browse/SECURITY-356
>             Project: PicketBox (JBoss Security and Identity Management)
>          Issue Type: Task
>      Security Level: Public(Everyone can see) 
>          Components: Negotiation
>    Affects Versions: Negotiation_2.0.3.GA
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>             Fix For: Negotiation_2.1.1
>
>
> This can be identified by checking the OID parsed in NegTokenInitDecoder.decode() and verifying that it is the OID for SPNEGO.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira