RE: Different realms

2018-01-28 Thread Robbie Harwood
"Imanuel Greenfeld" writes: > Robbie Harwood writes: >> "Imanuel Greenfeld" writes: >> >>> I have 2 domains which there is no trust between them. >> >> Do you have two realms (A and B), with two machines (machine_a in A, >> and machine_b in B), and two services (service_a on machine_a, and >> s

RE: Different realms

2018-01-28 Thread Robbie Harwood
"Imanuel Greenfeld" writes: > public void doWithKeytabFile() { > KerberosRestTemplate restTemplate = > new KerberosRestTemplate("/tmp/user2.keytab", > "us...@example.org"); > restTemplate.getForObject("http://neo.example.org:8080/hello";, > String.class); > } > > As you can se

RE: Different realms

2018-01-28 Thread Imanuel Greenfeld
Thank you Robbie. You are right using a script calling curl I managed to send the request and all ok, but it's horrible idea to call curl from C++ and how will I do it ? system call ? So, I did this instead so far :- struct SOAP_ENV__Header { struct ns3__Header *ns3__MyHeader;

RE: Different realms

2018-01-28 Thread Imanuel Greenfeld
Thanks Robbie. Noted. Ok, let me explain so that all is clear :- I'm not on Java, I'm on C++. I am trying to send HTTP request from machine_a (client) to machine_b (server) and these 2 realms have no trust between them. I found a way to get this to work with Java, but I am on C++. So in Java,

RE: Different realms

2018-01-28 Thread Robbie Harwood
"Imanuel Greenfeld" writes: > You are right using a script calling curl I managed to send the > request and all ok, but it's horrible idea to call curl from C++ and > how will I do it ? system call ? Curl has a library (libcurl) with bindings you can use: https://curl.haxx.se/libcurl/ Thanks,

Re: Different realms

2018-01-28 Thread Todd Grayson
Imanuel, You are describing a custom implementation of some sort, or we are confusing terminology of "Service ticket" vs "Kerberos Keytab". I'm afraid what you are describing is flawed in its premise that a kerberos keytab is ever actually "presented" over the wire in the way you are detailing.

RE: Different realms

2018-01-28 Thread Imanuel Greenfeld
Thank you Robbie. Appreciated. The problem is that we're 6 months into the project and we'll have to start again using libcurl instead of gSoap. So I'm re-sending you the existing code. Any ideas how this needs to change so that I can authenticate ? struct SOAP_ENV__Header { struct ns3__H