On 2010-06-06 12:09 PDT, Christian Schneider wrote: > I am trying to do single sign on using kerberos like Firefox does with > spnego. I am using the Java GSS API and run into the problem with the > allowtgtsessionkey regsitry on Windows 2003 (Like described on > http://java.sun.com/j2se/1.5.0/docs/guide/security/jgss/tutorials/Troubleshooting.html). > > Our security does not like changing the registry key and allowing > access to the session key. So I wonder how Firefox solved this > problem. On our Systems Firefox works without changing the registry > key. > > Could you explaing what steps are done in Firefox to acquire a service > ticket?
I suspect that nobody in this discussion group knows much (or perhaps anything) about it. Firefox's integration with spnego is not accomplished using any of Firefox's own crypto libraries, and this group discusses FF's own crypto libraries. Sorry. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
