[security-dev 01585]: Re: Request for comment: spec: NTLM as a SASL mech

Max (Weijun) Wang Weijun.Wang at Sun.COM
Tue Feb 2 20:27:02 PST 2010


Hi Nico

Is there a separate OID for NTLM as a GSS-API mech? I dare not mix it into the current SPNEGO mech.

BTW, update a few things, permanent URL is now:

   http://cr.openjdk.java.net/~weijun/spec/NTLMSASL

Or, go http://cr.openjdk.java.net/~weijun/spec/ for a list.

Thanks
Max

On Feb 3, 2010, at 11:45 AM, Nicolas Williams wrote:

> On Tue, Feb 02, 2010 at 02:49:54PM +0800, Max (Weijun) Wang wrote:
>> Hi All
>> 
>> Please take a review on this draft before I send it for CCC:
>> 
>>   http://cr.openjdk.java.net/~weijun/spec/NTLMSASL.0.1
>> 
>> The spec includes a raw NTLM API defined in com.sun.* namespace and
>> describes the newly added SASL mech.
> 
> If the SASL mechanism is the same as the GSS mechanism... you might be
> able to implement NTLM as a GSS mechanism and get both for free.
> 
> Nico
> -- 




More information about the security-dev mailing list