Delegated Kerberos through a CGI

Apologies for cross posting...

I have a CGI running on IIS 6 that I would like to access resources on other
IIS 6 machines using delegated Kerberos authentication. Delegation is
already working using ASP as per "http://support.microsoft.com/kb/314404";.

The CGI already supports "normal" Kerberos authentication using SSPI (i.e.
with a fixed user ID and password), and I guess that delegated authentication
goes through a similar "conversation" with the server? If so, what
credentials do I use in AcquireCredentialsHandle and how do impersonate the
client user ID? The CGI is getting an HTTP_AUTHORIZATION variable from IIS
with the protocol (Negotiate) and a key. Do I use this key to impersonate
the client user ID, and if so then how?

Thanks in advance for any help...

.

Relevant Pages

  • Kerberos authentication under IIS 5
    ... Kerberos authentication, ... used and IIS correctly delegates the credentials to the ... remote server via the ServerXMLHTTP object. ... delegation in this case does not work, ...
    (microsoft.public.inetserver.iis.security)
  • Re: Current User Credential Security settings dont seem to allow access when they should.
    ... You need to ensure that Kerberos authentication is being used, ... Is the IIS box trusted for delegation in Active Directory? ... Is the client actually using Kerberos to authN to the IIS box? ... the virtual folder is set to use integrated windows authentication and the ...
    (microsoft.public.inetserver.iis.security)
  • Re: CGI under IIS throws away printf on multiple posts.
    ... IIS is not throwing away anything. ... will have to implement in CGI, by taking a server-side lock to prevent the ... session from performing the operation a second consecutive time. ... "application session" (IIS is a high-performance server. ...
    (microsoft.public.inetserver.iis)
  • Re: 404 errors with cgi scripts
    ... the troubleshooting steps already exist. ... In F1 help in IIS ... 404 2 -- fail by Web Service Extension. ... It sounds like this CGI is one of them (it detects that it ...
    (microsoft.public.inetserver.iis)
  • Re: HTTP_AUTHORIZATION header
    ... You can configure IIS to not keep-alive with: ... I have verified that the method of execution of the CGI - GET form, ... Display HTML page in directory A, ...
    (microsoft.public.inetserver.iis.security)