cURL / Mailing Lists / curl-library / Single Mail


Re: --negotiate and IIS

From: Daniel Stenberg <>
Date: Fri, 12 Sep 2003 00:18:48 +0200 (CEST)

On Thu, 11 Sep 2003, Tim Bartley wrote:

> I've been playing with the new --negotiate feature in curl and it surprised
> me that it doesn't work with IIS's "Negotiate" http authentication scheme.
> It expects "GSS-Negotiate" for the authentication scheme (and then a
> Kerberos service name of khttp where IIS uses http). When I change the code
> to look for "Negotiate" and use a service name I'm happily able to
> authenticate using SPNEGO to IIS.
> I've submitted a patch
> (
> that allows curl --negotiate to accept both "GSS-Negotiate" and "Negotiate"

Cool and many thanks! I applied your patch nicely to the CVS version and will
commit soon.

> I was wondering if there was a good reason why only the "GSS-Negotiate"
> mechanism was implemented?

Daniel Kouril might be able to answer to that (as he brought that
functionality). I have no clue!

 Daniel Stenberg -- curl: been grokking URLs since 1998
This email is sponsored by:ThinkGeek
Welcome to geek heaven.
Received on 2003-09-12