[Mono-list] Mono, constrained delegation and protocol transition

[Sebastien Pouliot]

Hello Marc,

On Wed, 2010-03-17 at 07:53 -0400, Marc Boorshtein wrote:
> All,
> 
> I'm new to Mono and am trying to understand how Kerberos & Constrained
> delegation work together.  

They do not.

> I see that the libraries exist in Mono (ie
> there is a WindowsIdentity.impersonate method) but how does this work
> on Linux & Apache?  

The API is present and work (with limitations) on a subset of the
features (a bit like Windows NT did, i.e. no kerberos support) if SHM is
disabled.

Adding more features is not impossible but would not be easy and is not
something we plan to do (i.e. contributions are welcome :-)

Sebastien

> Does the web server user need to be running as a
> user who is logged into a kerberos session?  Also, are there lower
> level libraries for interacting with Kerberos directly so someone
> could have more control over the process?
> 
> Thanks
> 
> Marc
> _______________________________________________
> Mono-list maillist  -  Mono-list at lists.ximian.com
> http://lists.ximian.com/mailman/listinfo/mono-list