开发者

How to get a SPNEGO / Kerberos Session key -and implement HTTP Authentication:Negotiate on my own client

开发者 https://www.devze.com 2023-04-06 12:38 出处:网络
I was recently exposed to a new authentication method i had no idea of. After reading a bit and rese开发者_运维百科arching to understand it,I understood it has something to do with SPNEGO, or maybe it

I was recently exposed to a new authentication method i had no idea of. After reading a bit and rese开发者_运维百科arching to understand it,I understood it has something to do with SPNEGO, or maybe it is just spnego.

Im running windows xp on a large network, when my browser opens it automatically connects to a web-service in the network, which requires authentication:

HTTP/1.1 401 Unauthorized WWW-Authenticate: Negotiate

then my browser sends automatically (along with more headers ofcourse):

Authorization: Negotiate (encrypted string).

I concluded this Handshake uses the SPNEGO protocol.

What i need to do, is to create my own client (actually,its a bot that uses this webservice that requires that authentication). I Need to get that encrypted string (exactly like my browser gets it, probably by using some SPNEGO protocol) without any user interaction (again, as my browser).

the thing is, that i don't have enough time to study the spnego protocol and how to implement one.

I'm using c/c++, but if i have no option c# would be okay as well. Are there any functions / classes / codes or maybe even good tutorials to help me implement it shortly?


curl works with Kerberos/spnego. I'm not sure how well this functionality works on Windows, you should try and see. It works well enough on Linux. You can look at the source to see how it is done.

0

精彩评论

暂无评论...
验证码 换一张
取 消

关注公众号